Configuring HTTPS

[Former Member]

Hello,

I would like to configure HTTPS between SAP Web Dispatcher and SRM system.

They should communicate with the following architecture:

client --> https --> SAP WEB Dispatcher --> https --> SAP NW AS

Which is the best and easiest way to implement that architecture?

with best regards

[Former Member]

hi,

can you look at this

[https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/e04ebfdc-9916-2a10-2c82-fc057c8ced1c]

Regards,

Muralidhar

[Former Member]

Hi,

You have first to make a choice :

Do you want the web dispatcher to be transparent to the HTTPS connection or do you want it to decrypt/reencrypt the data flow ?

Then you just will have to setup HTTPS on both the web dispatcher and SRM and to setup the appropriate profile file.

Regards,

Olivier

[Former Member]

Hi,

I would like only to use HTTPS, without decrypt/reencrypt the data flow.

Regards

[Former Member]

>I would like only to use HTTPS, without decrypt/reencrypt the data flow.

Then you will loose the load balancing functionality of the web dispatcher...

Olivier

[Former Member]

Considering that it is connected to a Central System, without any application server.

Regards

[Former Member]

So, what you seem to need is

[End to End SSL|http://help.sap.com/saphelp_nw70/helpdata/EN/d8/a922d7f45f11d5996e00508b5d5211/frameset.htm]

Regards,

Olivier

[Former Member]

Looking at restrictions:

using End to End SSL does not allow to use HTTP redirects,

but is it possible to use https redirects?

Regards

[Former Member]

Hi,

>sing End to End SSL does not allow to use HTTP redirects,

>bt is it possible to use https redirects?

What do you mean ?

I can confirm that End to End SSL prevents https redirects with the SAP WDP.

That is why I don't use End to End SSL with WDP.

Regards,

Olivier

[Henk]

Hi Fabrizio,

If you use E2E SSL, redirecting is not possible in the SAP Web Dispatcher (since you'll be using the ROUTER protocol within your SAP WD instance profile). If you want to use redirecting, you'll have to use the HTTPS protocol within your SAP WD instance profile, which means, however, that decrypting/reencrypting will take place.

Regards,

Henk.

[Former Member]

Hi,

.Web Dispatcher will decrypt the message when it receives HTTPS request. You can specify on WD

if you want to encrypt message again while forwarding to WebAS. Hence a onetime decryption will occur at Web Dispatcher.

regards,

Pravash Raikar

[americo_goncalvesqualho]

Hi Fabrizio,

Web Dispatcher 7.2 supports SSL for multiple systems according to scenario 2,3,4 on the below help page:

http://help.sap.com/saphelp_nw04/helpdata/en/d8/a922d7f45f11d5996e00508b5d5211/content.htm

Unfortunately, for End-to-End SSL (ROUTER protocol), it only supports one system.

That is the reason why you cannot use End to End SSL and reencryption simultaneously.

So the only option left to you seems --> wdisp/ssl_encrypt = 1 or 2

Regards,

Americo.