Import SSL Certificate into web dispatcher from portal server

[Former Member]

Hello,

we use an SAP Portal 7.0 system over https.

Connection:

client --> HTTPS --> portal

Now, we have installed an additional dialog instance and an sap web dispatcher for loadbalancing.

We nat use the following connection type:

client --> HTTPS --> web dispatcher --> HTTP --> portal

Is it possible to export the SSL certificate from the portal system (j2EE) and import this into the web dispatcher since our SSL certificate is valid until September 2009.

With kind regards

Cengiz Köseoglu

[Former Member · Accepted solution]

Hi,

If the FQDN from the URL is the same for the web dispatcher and the portal, it should be possible but I am not sure because you would have to use the same key pair.

Try to see if you can generate a SAPSSLS.PSE file with sapgenpse.exe from the key pair exported from Visual Admin keystore. I've never tried it...

Regards,

Olivier

[Former Member · Accepted solution]

Hello Olivier,

I am not sure if I can export an *PSE key from the visual admin of the portal server.

The CERTIFICATE can be exported with following options:

- X.509 Certificate (*.crt)

- Base64 Encoded Certificate (*.cert)

The PRIVAT Key can be exported as follows:

- Base64 Encoded Privat Key (*.key)

- PKCS#8 Privat Key (*.p8)

- PKCS#12 Key (*.p12; *.pfx)

Other options are not displayed in the visual admin.

There is no "sapgenpse" executable in the kernel directory of the portal server so I can test if it is possible to export an *.PSE file.

Kind regards

Cengiz Köseoglu

[Former Member · Accepted solution]

check out

[https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/60d6de2e-085b-2b10-7a8f-bc9ae1e0bba6]

[Former Member · Accepted solution]

Hello Cengiz,

If you can export a PKCS#12 key you could try to generate a PSE file with this syntax :

sapgenpse import_p12 <additional options> [-p <pse file>] <filename>.p12

Check [Importing a PKCS#12 File |http://help.sap.com/saphelp_nw70/helpdata/EN/0d/9ce63bab134b39a52e340255d7650c/content.htm]

You can download sapgenpse.exe from service.sap.com/swdc

Regards,

Olivier

[Former Member · Accepted solution]

Hello Olivier,

it works,

I could export the files from the visual admin in PKCS#12 format.

Then import them into the web dispatcher with "sapgenpse import_p12 ....."

Thank you very much for you helpfull assistance.

Best regards,

Cengiz Köseoglu

[Former Member · Accepted solution]

Glad it worked !

I'll have to remember this technique for the future...

Olivier

[Former Member · Accepted solution]

Hi Olivier,

Could you please explain me, how to do i make my URL web dispatcher port work?

I have imported test certificate from SMP which is valid for 8 weeks and also downloaded root certificate. now in the j2ee engine i could able to import ssl certificate and there is no problem with HTTPS.

in the same way i have generated pse from sapgenpse in web dispatcher and imported certificate from SMP(SSL test certificate).it also said

C:\sec>sapgenpse import_own_cert -p SAPSSLS.pse -c sapresp.cer -r getCert.cer -x

abcpin

CA-Response successfully imported into PSE "c:\sec\SAPSSLS.pse"

but still i am unable to open URL, when i open its throwing

Internet Explorer cannot display the webpage ...

please help me

thanks

KK