Problem with X.509

[Former Member]

Hi,

I am trying to implement SSO using X.509 certificate for CRM WebClient.

Imported certificate from TCS to my system, and added certificate to ACL.

I am running this application to obtain the browser certificate, and on login with user id and password, the page is navigated to

https://service.sap.com/tcs with the below mentioned error...

Error: Incorrect certificate request (CertReq)

One of the following reason can cause this error:

You call this service without CertReq

Your CertReq is not valid or the signature is incorrect

Your RA is not registered yet

You apply for certificate within incorrect naming space

Please contact your system administrator.

[former_member248712]

I hope you used these two links

http://help.sap.com/saphelp_nw04s/helpdata/en/7c/1d0101f63d4410b5c80df326f412dd/content.htm

http://help.sap.com/saphelp_nw04s/helpdata/en/3b/6d04c7974743159e0eaeea2b40a537/content.htm

AB

[Former Member]

Can you be a little bit more precise. I don't understand what you did and where this error was generated.

[Former Member]

Hi Sietze Roorda,

I have followed the steps specified in help file and tried to implement

using SSL Test server certificate...

These are the tests I performed:

Enabled SSL on the server,

Created Cert Request from STRUSTSSO2 by application server node (SSL

Server)

Created Certificate Request by clicking "Export Certificate" button

under Own Certificate block

From https://service.sap.com/TCS, click on link SSL Test Server

Certificate

Copied the Certificate generated to text file, (Used type of server

PKCS#7 certificate chain)

Imported Certificate to SSL Server own certificate by pasting the

generated certificate

Maintained authorization S_USERCERT for the user

Performed steps to setup trust manager, in table SSFAPPLIC and from

transaction SSFA

To import certificate, started BSP service "certreq", and I get this

following error "Error when signing the certificate request"

Please consider this issue with hig prioroty....

Please let me know what i missed during the procedure?

[Former Member]

Created Certificate Request by clicking "Export Certificate" button
under Own Certificate block

That's not correct. The button is labeled "Create Certificate Request" and it is left uppermost button in the right hand pane of STRUST. You first have to select the correct PSE.