Skip to Content
Aug 19, 2009 at 05:05 PM

SSL client certficates not recognized by SAP service


I'm having a problem with SSL client certificates in that when I try to use them as authentication to a SAP service (Web Dynpro), I'm getting an error code "403 Forbidden, this service requires a client certificate" in Internet Explorer. I see in the icm trace that it states that states "no client cert". My vclient setting is set to "1" (the default).

When I use a tool such as openssl, I can see the client certificate being presented while turning on trace level 2 in the icm. Even then, the service still errors out and seems to re-direct to port 8000 (the http port, the ssl port is 443).

Is there some special way to setup client certificates in the browser that I'm missing? Why is the URL redirected to the http port when I call a service using a third party tool and I can clearly see the client certificate connection? Also, what determines the client here?

Sorry all of the questions, but I can't figure this out.

Oh, I am also on ECC 6.0 Enhp 1.

Edited by: George Hamilton on Aug 19, 2009 7:09 PM