FTPS Sender and FTPS Receiver adapter. Pls help

[Former Member]

Hi All,

I need to make file to file scenario with secure connection

I am using FTP Sender and Receiver Adapter with Connectivity

as FTPS.

Please let me know the steps I need to do for this

1. Integration Directory

2. If I need to generate certificates what steps I need to do:

a. How to generate certificates

b. Where to install these certificates like File Servers, XI

Server etc.

3. How to use these certificates in File Server, Integration

Directory etc.

Please send me a document to do all steps.

In advance thanks and Full Points will be awarded.

Regards

[Former Member · Accepted solution]

Hi,

Deploy SAP Java Cryptographic Toolkit.&

Add the CA certificate to the key storage as below.

Keystore: service_ssl

X.509 Certificate & Private Key: ssl-credentials

This means that you need to import the CA hierarchy of your FTPs server certificate into the list of trusted CA's in XI ( either on J2EE side in the keystore service or in ABAP side via transaction STRUST , depending on where your client is ).

If connection security parameter in communication channel for Sender FTP Adapter is set to "FTPs( FTP Using SSL/TLS) with Control Connection" only, file gets successfully created with data at the FTP server but as soon as we switch the connection security parameter to "FTPs( FTP Using SSL/TLS) with Control and Data Connection".The initial handshaking happens successfully and file gets created at the FTP Server but its empty, connection fails when attempt is made to write data into file and we end up with said error thereby closing the connection.

SAP Note 821267

Refer below link

SAP Network Blog: SFTP vs. FTPS in SAP PI

/people/krishna.moorthyp/blog/2007/07/31/sftp-vs-ftps-in-sap-pi

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/400580c1-8d16-2a10-3eb3-ec1026da...

[Former Member · Accepted solution]

Hi Swarup,

Point:

1. Deploy SAP Java Cryptographic Toolkit.&

Add the CA certificate to the key storage as below.

2. Keystore: service_ssl

X.509 Certificate & Private Key: ssl-credentials

For Point 1. and 2 . do I need to follow this link:

http://help.sap.com/saphelp_erp2005/helpdata/en/e3/94007075cae04f930cc4c034e411e1/frameset.htm

Point:

3. In XI do I need to select

FTPs( FTP Using SSL/TLS) with Control Connection

OR

FTP Using SSL/TLS) with Control and Data Connection

Point:

4. Do I need to specify any certificate name in XI.

If yes then how?

5. Aany point missing from me pls update me.

Regards

[Former Member · Accepted solution]

Hi,

I think these steps are sufficient.

Point:

4. Do I need to specify any certificate name in XI.

If yes then how?

--->I think the installed X.509 Certificate & Private Key: ssl-credentials

will be enough,

If the receiver FTPS system is looking for any specific certificate then you need to install it in XI,

Step by step guide for SSL security

5. Aany point missing from me pls update me.

--> The above settings are sufficient.

thanks

Swarup

[Former Member · Accepted solution]

Hi Swarup,

Point:

1. In XI do I need to select:

FTPs( FTP Using SSL/TLS) with Control Connection

OR

FTP Using SSL/TLS) with Control and Data Connection

Point :

2. Will the the installed X.509 Certificate & Private Key: ssl-credentials be enough for Sender File System and Receiver File System Certificate part.

So I do not require to give any certificate setting in XI then.

Regards