HTTPS authentication using SSL in SOAP Sender adapter

[sherin_jose4]

Hi,

We are currently doing a SOAP to RFC synchronous scenario in PI 7.0. Our client wants to ensure that the data security is maintained at the transport level. So, we have planned to implement the HTTPS without client authentication using SSL certificates. Our Basis team has promised us that they will take care of the cerficate generation and installation part in the server. Now i am confused at the PI communication channel setup level.

1) Do i have to specify the certificate installed path in the channel or in any other object ? If so, where do i have to configure the path ?

2) What is the exact path that has to be carried by a PI developer once the certificates are installed in the server ?

I have attached my communnication channel screenshot below,

http://i41.tinypic.com/mk49h.jpg

Please let me know what i have to configure in the Sender SOAP channel to receive data securely once the certificates are installed in the system.

Thanks & Regards,

Sherin Jose P

[baskar_gopalakrishnan2 · Accepted solution]

>1) Do i have to specify the certificate installed path in the channel or in any other object ? If so, where do i have to configure the path ?

No need. basis will do the certificate installation in STRUST. You just need to select the option http without client authentication.

>2) What is the exact path that has to be carried by a PI developer once the certificates are installed in the server

You need to just test the message flow from sender system to Pi and see the message can able to get into PI. Basically your part is testing and also verify certificate installed is valid and more.

[sherin_jose4 · Accepted solution]

Hi Baskar,

Thanks for your kind reply !

So, could you please let me know how i can ensure that i am receiving data into the PI system securely ?

How can i make sure that the certificates are verified when the data enters inot the PI system ?

[Former Member · Accepted solution]

Hi,

1.for transport level security you should assign the HTTPS connection created in SM59 to the SOAP communication channel.

The HTTPS connection should use the certificates imported in t-code STRUST.

have you seen below thread,

Please go through below blog,

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/b2e7020d-0d01-0010-269c-a98d3fb5d...

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/60ff2883-70c5-2c10-f090-a744def2b...

http://help.sap.com/saphelp_nwpi71/helpdata/de/14/ef2940cbf2195de10000000a1550b0/content.htm

2. you nedd to check the message flow between the sender and receiver through PI .

regards,

ganesh.