Activating HTTPs connection is SAP

[Former Member]

Hi,

The following are the pre-requisites to activate HTTPs connection for our XI server.

PROT=HTTPS,PORT=84$$,TIMEOUT=900,PROCTIMEOUT=600

Note: PORT value is a unique number. It means HTTPS, SMTP and HTTP port numbers should not be same.

2. Create directory sec under /usr/sap/<SID>/<Instance> and update SAP environment variable .sapenv_<hostname>.sh (or .sapenv_<hostname>.sh) with the following value with user SIDADM.

SECUDIR=/usr/sap/<SID>/<Instance>/sec; export SECUDIR.

Question 1) What should be the port number?

               2) How do we update the following parameters?

Update “.sapenv_<hostname>.csh with following entries :setenv SECUDIR /usr/sap/<SID>/DV*/secsetenv USER <sid>adm
Update “.sapenv_<hostname>.sh” with following entries :SECUDIR=/usr/sap/<SID>/DV*/sec; export SECUDIRUSER=<sid>adm; export USER

Kind Regards,

Ambarish

[Former Member · Accepted solution]

Hi ,

Have you extracted Cryptographic library??

are you following SAP Note 510007 ?

If not , please follow the SAP note for step by step configuration.

Regards

Deepak

[Former Member · Accepted solution]

I did and have twice repeated the steps...still no luck

[Former Member]

Hi All,

Kindly let me the link if possible to configure the HTTPs and SSL connection for the integration of PI systems.

I am not able to find the HTTPs option in our SMICM.

Regards,

Ambarish.

[Former Member]

Hi,

Please let me know as to how do I set the environmental variable in HP-UX.

I am trying to set SECUDIR, need suggestions on it.

Regards,

Ambarish.

[Former Member]

It depends on shell you are using. For bash use export SECUDIR=<path> command, for csh setenv SECUDIR <path>. This commands need to run for every session. To persist these settings write this in user .sapenv.sh(csh) (.sapenv_<hostname>.sh(csh)) files.

Regards

Roman

[Former Member]

Roman,

I have set the environmental variables and after running the echo command I am able to see the path also. But still when I go under the transaction STRUSTSSO2 transaction the pse files are not seen result of which I am unable to activate my HTTPs service.

Regards,

Ambarish.

[Former Member]

Try to restart SAP system with new environment.

Regards

Roman

[Former Member]

Roman,

Done, still not showing.

I am little concerned over my following parameter:

icm/server_port_5                           PROT=HTTPS,PORT=1443,TIMEOUT=900,PROCTIMEOUT=600

Is this correct???

[Former Member]

Check HTTPS service in SMICM Goto -> Services

Regards

Roman

[Former Member]

It shows HTTPs service but not activated.

[Former Member]

You need to activate HTTPS service with Service->Activate. If it does not activated, check error log.

Regards

Roman

[Former Member]

I donot see HTTPs service under SICF-services.....

[Former Member]

Use SMICM transaction. Goto->Services

Regards

Roman

[Former Member]

Can I know the path?

I am under SICF-> services->...........................

[Former Member]

Hi Ambarish ,

Goto SMICM --> GOTO -->services

Then check the HTTPS service , and activate.

Regards

Deepak

[Former Member]

Deepak,

I donot see HTTPs service under service.

[Former Member]

Hi,

Please check your active instance profile whther "icm/server_port_x = PROT = HTTPS PORT =xxxx " is defined or not .

n after chaning the parameter , you have to restart the server to reflect those parameter.

Regards

Deepak

[Former Member]

icm/server_port_5                           PROT=HTTPS,PORT=1443,TIMEOUT=900,PROCTIMEOUT=600

this parameter is defined as mentioned above and the server was restarted when the parameter was set.

[Former Member]

Please run SMICM tcode. Then Goto->Services and paste screenshot here.

Regards

Roman

[Former Member]

  1  HTTP               50000                XXXXXXXXXXXXXX        60        600

  2  P4                 50004                XXXXXXXXXXXXXXX        60         60

  3  IIOP               50007                XXXXXXXXXXXXXXX        60         60

  4  TELNET             50008                XXXXXXXXX                   60         60

  5  SMTP               0                    XXXXXXXXXXXXX       120        120

  6  HTTPS              1443                 XXXXXXXXXXX       900        600

The first five services are active other than the 6th one which is HTTPS

[Former Member]

Check HTTPS service and then run Service->Activate

Regards

Roman

[Former Member]

Throws error rc=1

[Former Member]

Run SMICM tcode. Goto->Trace File->Display all and check for errors. Please paste this log here.

Regards

Roman

[Former Member]

*** ERROR => NiIBindSocket: could not delete file '/tmp/.sapstream64999' (hdl 1; errno=0) [nixxi.cpp    3725]

This is error

[Former Member]

ERROR => HttpModParseFile: Could not open file: /usr/sap/DX1/SYS/global/security/data/icm_filter_rules.txt

Another one

[Former Member]

ERROR =>   secudessl_Create_SSL_CTX():  PSE "/usr/sap/DX1/DVEBMGS00/sec/SAPSSLS.pse": File not found!

[Former Member]

Create SSL server PSEs according to note 510007.

Regards

Roman

[Former Member]

The problem is though I have added all the files still under the T-code STRUST T-code I am not even able to find the PSE files.