SSL Config for SAP webgui service of ABAP

[Former Member]

Hi Gurus,

We have a duel stack system, details are as follows:

ECC 6.0 SR2

ABAP Stack 11

Java Stack 13

we want to access the webgui via internet and for this we have configured the webdispatcher which is behid the firewall. we had created the ccr and got the CA response which is imported in the Dispatcher. So the traffice from the end user to Dispatcher is SSL enabled. Then we did same thing for ABAP as well and now the completed trafic is SSL enabled. Our problem is...

when we use the URL to login to webgui it changes the url and hence does not work from internet. Please note that we dont want to expose our ECC system to public netowrk.

e.g :

https://portal.mycompany.com:8100 --> this is the web dispatcher URL this should give us the login screen and stay as it is all the time. But ......when it gives the login screen it gets changed to

https://ecc60server.mycompany.com:8000 --> and as the ECC server cant be accessed via internet this URL fails when we are outside the company network.

similarly for the Java stack of the same system also we have the URL and it works just fine.

rewards will be awarded for the solutions....

Pravin

[Former Member]

Hi Pravin,

So if I get it right, you need an End-to-End SSL setup for you WebDispatcher.

This means that the Webdispatcher simply re-directs the calls but still shows the official url to the client.

I think you have a problem in the webdispatcher profile.

there should be one entry like

icm/server_port_0 = PROT=ROUTER,PORT=443

This means that the webdispatcher is listening for traffic on port 443.

then there should be another entry like

icm/server_port_1 = PROT=HTTPS,PORT=0

this means that the webdispatcher does not listen to this port (PORT=0) but simply send data to it.

Then, the actual connection to the ABAP-system

ms/https_port = 8101 (or whatever port you used for https)

rdisp/mshost = <full.host.name.including.domain.name>

another important parameters is: wdisp/server_info_protocol = https

[Former Member]

Hi Pravin,

You wrote:

>We have a duel stack system, details are as follows:

>ECC 6.0 SR2

>ABAP Stack 11

>Java Stack 13

This is not recommended! You should have your ABAP and Java stacks on the same support package level!

Best Regards,

Matt

[Former Member]

Hi,

Read this Wiki : https://wiki.sdn.sap.com/wiki/display/BSP/Using+Proxies

It should give you the needed information.

Regards,

Olivier