Skip to Content
author's profile photo Former Member
Former Member

How to configure SAP webdispatcher for SSL when using multiple URL's ?

Hi,

We are trying to get multiple URL's to access our BSP applications over one webdispatcher.

fi. https://xxx.business1.com/applic1 &

https://yyy.business2.com/applic2

Both URL's are directed to the same webdispatcher where we end the SSL.

From the webdispatcher we go over HTTP to the message server to allow for load balancing.

Everything is working fine except for the validation of the certificate for yyy.business2.com .

Problem is that even with a certificate list (so multiple certificates loaded on the PSE file) the webdispatcher will only validate the first certicate added on the PSE file.

How can we setup the architeture with webdispatcher so that it allows multiple URL's over HTTPS, so with multiple certificates ?

Thanks !!

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

2 Answers

  • Best Answer
    author's profile photo Former Member
    Former Member
    Posted on Dec 16, 2008 at 09:16 PM

    I have never tired to use multiple SSL certs in one PSE, but it is possible resolve your situation without it.

    Install 2 instances of web dispatcher and let one listen for hostname xxx.business1.com

    icm/server_port_0 = PROT=HTTPS,PORT=443,TIMEOUT=900,HOST=xxx.business1.com

    and another for yyy.business2.com:

    icm/server_port_0 = PROT=HTTPS,PORT=443,TIMEOUT=900,HOST=yyy.business2.com

    Each one will have its own PSE and will listen and respond only for the appropriate hostname call.

    This solution actually gives you more flexibility managing web connections.

    Regards,

    Slava

    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Salute Olivier,

      Je suis tout à fait d'accord.

      Because Peter mentioned two different hostnames, I thought he is trying to do SSL termination for 2 different SAP systems on one web disp, which means he does not do load balancing (web dispatcher can do load balancing only for one SAP system).

      However, if he is using 2 aliases for the same SAP system and it has multiple nodes, there should be a web dispatcher behind Apache.

      Another solution is two web dispatchers as was discussed before.

      Regards,

      Slava

  • author's profile photo Former Member
    Former Member
    Posted on Dec 17, 2008 at 11:46 AM

    Hi,

    Thanks for Replying.

    Do you happen to have a sample Apache configuration file ?

    I think the trick would be to change the 2 hostnames fi. xxx.business1.com & yyy.business2.com

    To one common on Apache fi. xyx.mydispatcher.com and add 1 certificate on the sapwebdispatcher onto this host.

    Thanks

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.