SOAP Adapter with Security Levels - HTTP & HTTPS

[Former Member]

We have a successfully working interface scenario where SAP XI is hosting a web service and the partner systems calling it using SOAP Adapter URL http://host:port/XISOAPAdapter/MessageServlet?channel=:service:channel with Security Level HTTP on the SOAP Sender Communication channel.

Going forward, for other similar interfaces (SAP XI hosting Web Service and partner systems calling it), we would like to use HTTPS and/or certificates.

If we enable HTTPS on XI J2EE server as per the guide How to configure the [SAP J2EE Engine for using SSL - Notes - PDF|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/964f67ec-0701-0010-bd88-f995abf4e1fc]....

can partner systems still use the URL http://host:port/XISOAPAdapter/MessageServlet?channel=:service:channel or should they switch to https://host:port/XISOAPAdapter/MessageServlet?channel=:service:channel?

can we continue to have the existing interface working using HTTP Security Level i.e. partners not having to send the certificate with each message?

If we use HTTPS security level, is it mandatory for the partner system need to send the certificate? Is it possible to have an HTTPS scenario w/o certificates?

What is the difference between Security Levels 'HTTPS Without Client Authentication' & 'HTTPS with Client Authentication'?

I appreciate your inputs on this.

thx in adv

praveen

PS: We are currently on SAP PI 7.0 SP17

[prasannakrishna_mynam]

Hi Praveen,

There is no need to change the interface and It is manditory for the partners to send certificates in order to validate each other. Use the https in url.

HTTPS With Client authentication:

The HTTPS client identifies itself with a certificate that is to be verified by the server. To validate the HTTPS clientu2019s certificate, the HTTPS server must have a corresponding CA certificate that validates this certificate. After validation of the clientu2019s certificate, the server maps the certificate to an actual system user executing the HTTP request.

and check this link.

http://help.sap.com/saphelp_nw04/helpdata/en/14/ef2940cbf2195de10000000a1550b0/frameset.htm

Regards,

Prasanna

[former_member732072]

Hi Praveen,

Please have a look at the following links and see if it helps

http://help.sap.com/saphelp_nwpi71/helpdata/en/14/ef2940cbf2195de10000000a1550b0/frameset.htm

and

also,

Best Regards