Change HTTP port to 80 and HTTPS port to 443

[nelson_raj2]

Hi,

We are currently running our ECommerce application for CRM 5.0 and all functions are working fine. However, we have the following issue:

The HTTP port is currently on 50100 & HTTPS on 50101. We want to change the same to port 80 and 443 respectively so the port numbers are not visible in the URLs, from a point of view of security.

How do we achieve the same?

Full points will be rewarded!!!

Thanks & Regards,

Nelson Raj.

[nelson_raj2 · Accepted solution]

Hi,

Under Cluster, which one do we select? Dispatcher or Server?

Thanks & Regards,

Nelson S. Raj

Edited by: Nelson Raj on Feb 18, 2008 1:29 PM

[prashil · Accepted solution]

Hi Nelson,

Kindly Navigate in Visual Administrator as below:

Cluster -> Dispatcher -> Services -> HTTP Provider

On the right side you'll find Ports as field set it as:

(Port:80;Type:http)(Port:443,Type:ssl)

Remember to restart the J2EE engine to reflect the changes.

Hope this will resolve your issue.

Regards,

Prashil

[nelson_raj2 · Accepted solution]

Hi,

I have tried that. Currently it is set as follows:

(Port:50100;Type:http)(Port:50101,Type:ssl)

When I change these ports to say, 443 for ssl, it fails to appear under the service SSL Provider for the Server. I require the port to appear in the service SSL Provider when I select either Active Sockets or New Sockets. I am assigning my Key Pair (Private and Public keys) to a particular socket which will be the HTTPS port.

As I have mentioned before, I tried changing the port to 443 and restarted the Server, but do not see it in my SSL Provider service.

What could be the next step??

Thanks & Regards,

Nelson S Raj.

[mark_foley · Accepted solution]

Hello,

Have you make the changes in the XCM of the ECO application to use these ports?

Go to the XCM

=> General Application Settings

=> Customer

=> b2b

=> b2bconfig

Here you can set the port that is used for http and https , the steps that you are folloing would eb to allot these ports on the j2ee as far as i know.

regards

Mark

[nelson_raj2 · Accepted solution]

Hi Mark,

Thanks for the response.

Before I go to change any settings in XCM, I need the port to be available under Active OR New sockets in SSL Service in Visual Administrator itself. As per the configuration for SSL for the Web shop, this is a required entry.

The problem is that now under Active sockets I am able to see 3 ports - 50101, 50102, 50103. When I change the HTTPS port to 443 in Ports, then the entry in SSL Service vanishes. I have even tried changing this to some other number, just to test, to 50104. Even this does not show up.

What could be the error?

Thanks & Regards,

Nelson S Raj.

[Former Member · Accepted solution]

You need to let your web dispatcher know that you have change the port. Go to the machine which host your dispatcher.. find it profile and change this line to something like this...

1. Description of the Access Points

icm/server_port_0 = PROT=HTTP,PORT=80

icm/server_port_1 = PROT=ROUTER,PORT=443

[nelson_raj2 · Accepted solution]

Hi marjan,

This is to be done after I have been able configure the ports in my server or dispatcher in either Visual Admin or Config tool. However, before doing that how do I associate the certificate key pair to this new port? It is not even visible in my active sockets?

Please correct me if i have understood the error correctly.

Thanks & Regards,

Nelson S. Raj.

[Former Member · Accepted solution]

Nelson,

I think it's better to leave the J2EE server as it is and configure a reverse proxy or load balancing solution to do the job. If you have a hardware load balancer in your landscape, you can have them configure a virtual ip with ports 80 & 443, have the load balancer route the traffic to HTTP/HTTPS ports of the J2EE server. That's how we do it in our e-commerce landscape. You just need to create a DNS alias for the virutal IP of the loadbalancer and publish the DNS alias to the end users.

-RK

[johan_vanzijl · Accepted solution]

I agree with RK. Normally, the e-commerce server will sit behind a firewall, and doing a NAT/Port translation should be simple for the network guys. Also, on unix environments root access(not sure about windows) is required to start services on port numbers below 1024(such as 80 or 443). The user under which SAP starts normally doesn't have access on the OS to start services on 80 or 443.

So I would also leave the ports in the J2EE as is.

Regards

Johan

[Former Member]

Hi Nelson,

As per suggested by RK , it's better to leave the J2EE server as it is and configure a reverse proxy or load balancing solution to do the job.

There are standard formats in configuring the ports for SAP J2EE Apllication server with the combination of instance_number and port_indexs for HTTP / SSL .

This link will give you more information on this .

http://help.sap.com/erp2005_ehp_03/helpdata/EN/a2/f9d7fed2adc340ab462ae159d19509/frameset.htm .

Port 80 and 443 can be configured on the load balancer , without disturbing the standard SAP J2EE Configuration and can be routed to the application based on the requests.

Thanks and Regards,

Tony Isaac.

[former_member297801]

We're sorry, but this content is not accessible.

[prashil]

Hi Nelson,

To Change the default port number, you need to login to Visual Administrator.

Under Cluster -> Services -> HTTP Provider

There is a single field which shows the HTTP port number and SSL port number.

Update the field as you required and restart the J2EE engine.

Your changes will be reflected.

Please let me know if you have any queries further.

Regards,

Prashil