Server certificate on WAS 640

[Former Member]

When setting up Trust manager (strust), the system automatically creates a SSL key, and saves the key in $(DIR_INSTANCE)/sec/SAPSYS.pse.

We would like to use an wildcard certificate already created by GlobalSign. ( *.bang-olufsen.dk).

What is the file format for the .pse file. Is it a PKCS7?

Is there a way to build a sapsys.pse form a PKCS7 or PKCS12 file?

[WolfgangJanzen]

Please refer to note 510007.

The SYSTEM PSE (contains certificate with DSA keypair) is usually used for digital signatures (=> SAP logon ticket) but definetly not for SSL.

Using transaction STRUST is the best approach.

It will automatically suggest you proper CNs for the SSL server certificates.

No, the PSE file format is proprietary.

But you can perform an PKCS#12 import/export using a command line tool (sapgenpse); required: SAPcryptolib pl16 (or higher); see SAP note 745063.

Regards, Wolfgang

[eddy_declercq]

Hi,

Pls don't forget to reward points if you feel that your question has been answered.

Eddy

[eddy_declercq]

Hi,

It's rather late for a reply, but just found your msg unaswered. Check note 578377.

To my feeling PKCS12 is usually used to store client certificates and private keys and thus PKCS7 is the format.

Eddy