Certificates are not listed in Sender Agreement

[Former Member]

Hi,

I have a message level key pair created on an adpater engine(say, ABC) under a Keystore view of type "USER". On target PI( where i am configuring to recieve the message from a source PI), I have a sender agreement where in i am decrypting the message using the key created on adapter engine(This adapter engine is not a center adapter engine. Its a deifferent server than the targer PI).

In the SOAP sender adapter channel i have selected adapter engine as ABC instead of centre adapter engine. And the same SOAP sender channel is used in Sender agreement.

When i am trying to put the certificate details in sender agreement with the F4 help, certificates that i have created on ABC are not listed on target PI. Other certificates(under keystore view of type "System") are listed.

What could be the problem here?

[former_member732072]

Hi Deepika,

Please have a look at the following links and see if it helps

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d23cbe11-0d01-0010-5287-873a2202...

Best Regards

[former_member192295]

Hi,

I think the problem is due to corresponding certifice wrongly add to list in visual administrator, generally keystoreentry and keystore view etc lists available. Better to check with basis team your required certificate was added to which list. Some time the problem is due to inside certificate data also for the check with certificate people they will sort out easily.

I have faced same problem in one of my project, i have raised question to sap. They have suggested below ways to sort out problem

the F4 help of the Integration directory will not recognize the

Certificate if the Subjectkeyidentifier field of the certificate is leftunfilled . The issue can be dealt with in 3 different ways .

1. Type in the Certificate name with out the use of F4 help (OR)

2. Regenerate the certificate with a valid value for the

subjectkeyidentifier . (OR)

3. Edit the adapter meta data which is present in the Integration

repository and get the F4 help working .

For this,remove the following tag from the adapter meta data file

<HelpServiceQueryAttribute>

<Name>X509Extension</Name>

<Value>SubjectKeyIdentifier</Value>

</HelpServiceQueryAttribute>

This will be inside the <HelpServiceQueryAttributes> tag .

This method has the disadvantage that any upgrade will result in the adapter metadata being overwritten and hence the above change will

be reverted.

[Former Member]

Hi Nallam,

I have tried the first option that is typed in the certificate details without F4. If this works, then fine. I just wanted to be sure that it should work. The problem is i cannot test it right now bcoz its our production server. Any way thanx a lot. Hope it works.

[Former Member]

Hi Nallam,

Could you please also tell me, where do u specify subjectkeyidentifier . Because when i generated a key pair i didnt get this option anywhere. I am creating it from NWA->certificates and keys.

Also where is the adapter meta data? how do i find it in repository?