Encrypt the file using SSF(Secure Store and Forward) and ABAP

[monika_dhumal]

Hi Everyone,

I want to encrypt the data using SSF ABAP.

for that i have done all necessary setting in STRUST in following way :

1. Create Certificate request

2. Send it to Service.sap.com to get Request response

3. Import the Certificate request response to PSE

4. Export the certificate from receiver's PSE

5. Import that certificate to sender's PSE

how to test this connections and then how to start with this to encode the file?

Very new to SSF.

Your help will be appriciated.

Thaks

Monika

[monika_dhumal]

Hello Friends,

I need to Encrypt my file using SSL Certificate which is genrated in STRUST.

How to do that?

Please help.

Thanks,

Monika

[brad_bohn]

See programs SSF01 and SSF02 which allow you to test SSF operations on your front-end and app server. You will also see the functions in the programs for creating the digital envelopes. Refer to the help files for the admin steps for configuring SSF.

[monika_dhumal]

I have generate the Security certificate using STRUST.

I am calling function SSF_SIGN_BY_USER to digitally sign the document.

But I am getting CRC = 1 in return.

can anybody help me to assign SSF data to the User in su01.

I have to fill some fields by usign security certificate :

fields are : SSF ID , SSF ID Part2 , SSF Profile

Certficate is :

Owner : CN=DEB, OU=I0020538104, OU=Server, O=SAP Trust Community, C=DE

Issuer : CN=Server CA, OU=Server, O=SAP Trust Community, C=DE

Serial Number : 6B2CA5FC7E69D658100301001819

How to relate this. Please help

[monika_dhumal]

Hello Friends,

I got sucess to Sign and Verify the document digitally using SSF method.

Now I want to Encrypt my document.

But while testing into Standard program SSF01, SSF02 I am getting following error :

SSF_API_UNKNOWN_SECTK_ERROR Unknown or Undefined error in Security Toolkit ( CRC = 7 )

I am using Standard toolkit SAPSECULIB

Can anybody help me on this?

Thanks in advance.

[monika_dhumal]

Hello friends, any help?

I have installed latest SAPCRYPTOLIB with version 5.5.5p130 but my SSF01 test program is showing the older version only. i.e 5.5.5C

help me to sort this error.

Thanks in advance.

Edited by: monika dhumal on Jun 21, 2011 10:53 AM

Edited by: monika dhumal on Jun 21, 2011 11:59 AM

[Former Member]

Hi Monica,

Do you plan to encrypt the file with server certificate or the client certificate?

if the server certificate is used, you need to call function SSF_KRN_ENVELOPE instead of SSF_ENVELOPE.

[monika_dhumal]

Hi,

Problem is solved.

Thanks to all.

[former_member348280]

Dear Monika,

Could you share how you have solved this issue?

I´m having the exact same problem.

[monika_dhumal]

Which PSE you are using to Encrypt the file?

Use SSL Serve/Client PSE.

Hope this helps.

Any issue pls revert.

[former_member348280]

I was using the System PSE.

Using the SSL Standard PSE it seams to work.

Thanks a lot for you help.

Now i will install the proper CERT and try.

[monika_dhumal]

Have you done with your encryption part. Are you decrypting your file on external server. If Yes please let me know which details we need to send him back with Encrypted file or Only an encrypted file?

Thanks,

Monika

[Former Member]

Hi Monika,

I was requested to implement a similar process at my organization. I need to extract data from SAP R/3, generate an XML file, digitally sign it and download the file to local drive/application server. I have gone through the SSF help documents and it is not very clear on how to implement it. I am also new to digital certificate concept.

I really appreciate if you can let me know the step-by-step process to implement the above scenario OR forward any documents that you may have

1. How to install the digital certificates of Recipient using STRUST? under which category?

2. Shoud we use the SSF_KRN if the program needs to be scheduled as a batch job?

Thanks

Tony

[monika_dhumal]

For digital signature,

1. How to install the digital certificates of Recipient using STRUST? under which category?

Import recipient certificate in STRUST, add it to the certificate list. For digital signature you need to add it under System PSE.

2. Shoud we use the SSF_KRN if the program needs to be scheduled as a batch job?

You have to use SSF_KRN only.

Search for the following document on google. It will be helpful.

Secure Store and Forward programmer's guide

Cheers

[Former Member]

Hi Monica,

Thanks for your input.

but I have trouble loading the recipients digital certs into System PSE. They gave me .pfx files. Any limitations on the certs file extension?

Appreciate your help.

Thanks

Tony

[Former Member]

Hi Monica,

I resolved the issues with digital signing and certifcates.

I now have an issue with encryption. I am using SSF_KRN_ENVELOPE function module to encrypt the data which has already been signed. It is throwing an exception with CRC = 13. I am using a customer PSE to encrypt the file. I will try using SSL/Client Server PSE as suggested by you. But do you think this is the root cause of the issue or something else?

Please advise.

Thanks

Tony

[Former Member]

Hi Monika,

Im trying to encrypt a pdf file throuh SSF02.Ive installed sapcryptolib on app server.

im using SSF_GET_PARAMETER to get the parameters giving application input as 'DFAULT'.When i pass those inputs to program ssf02 and choose envelope option, it gives SSF_API_UNKNOWN_SECTK_ERROR error.Please let me know in detail what to do.

Nidhi.

[Former Member]

Hey Nidhi,

did you find a solution for this error? I'm facing the same error using SSF02.

regards,

Frank

[Former Member]

Hi Monika, usted logro resolver el problema de encriptación, lo requiero para PGP.

Saludos,

Italo