This website is not affiliated with, sponsored by, or approved by SAP AG.

SAP Web Dispatcher - Activating SSL

Basis (Basis Technology Modules: Basis Component/System Administration, GUIs)

Moderators: Snowy, thx4allthefish

SAP Web Dispatcher - Activating SSL

Postby Baz » Wed Oct 01, 2014 9:10 am

Hi

We have installed the web dispatcher 7.41 to use as a front end in to ECC via the DMZ for Mobile and UI5 devices.

the simple set up:

UI5/Mobile > HTTPS > Web Dispatcher > HTTP > Gateway > Trusted RFC > SAP ECC

the Webdispatcher is sitting in the DMZ.

We have activated the parameter VCLIENT to option 2 - as we want only UI5/Mobile devices with the certificate installed to be able to view the Log In page - this is per standard build/config.

However we tried installing the Certificate from the webdispatcher on the client machine and the page is not displayed.

Which certificate are we supposed to use? SAP Help is not generally helpful in this area....
Should we have a client certificate generated and installed into the web dispatcher?
Baz

AsPiRiNg tUlY iDiOt Image

http://www.catb.org/~esr/faqs/smart-questions.html

Image

check out my Podcasts http://dj-baz.podomatic.com
Baz
 
Posts: 4736
Joined: Fri Nov 08, 2002 5:54 am
Location: He's out there! somewhere!!!!

Re: SAP Web Dispatcher - Activating SSL

Postby Snowy » Fri Oct 03, 2014 9:29 am

Hi,

I did this a long time ago and could not find any doc.

What I remember is that I had to go in ECC system and create a certificate in tcode STRUST. This is what I vaguely remember, but I could be wrong.

This could help you find a direction for your issue... it's the best I can do right now.

thanks.
SapFans Moderator

Search: http://www.sapfans.com/forums/search.php
Notes: http://service.sap.com/notes
Help: http://help.sap.com
Rules: http://www.sapfans.com/forums/viewtopic.php?t=344127
Snowy
 
Posts: 28767
Joined: Mon Oct 21, 2002 2:33 pm
Location: 3.1415926535

Re: SAP Web Dispatcher - Activating SSL

Postby Zavaros » Mon Oct 06, 2014 5:17 am

Hello,

how looks your icm/server_port_<xx> parameter like?
do you have any error message?

I assume you created the webdispatcher certificate as described in: http://help.sap.com/saphelp_nw70/helpda ... ontent.htm

if the certificate is self-signed then the public key ohas to be installed in the client machine as trusted CA.

Regards,
Zav
Zavaros
 
Posts: 756
Joined: Thu Oct 24, 2002 10:50 pm
Location: Hungary

Re: SAP Web Dispatcher - Activating SSL

Postby Baz » Mon Oct 06, 2014 8:53 am

Hi

thanks for the responses.

This is an inbound request and the HTTPS terminates at the webdispatcher and then goes via HTTP to Netweaver Gateway and then via trusted RFC to SAP ECC.

I was hoping we could use the certificate generated on the webdispatcher host, install this on our devices and then the authentication would work.... how wrong was I.....

I will ask if they installed the public key as well...
Baz

AsPiRiNg tUlY iDiOt Image

http://www.catb.org/~esr/faqs/smart-questions.html

Image

check out my Podcasts http://dj-baz.podomatic.com
Baz
 
Posts: 4736
Joined: Fri Nov 08, 2002 5:54 am
Location: He's out there! somewhere!!!!

Re: SAP Web Dispatcher - Activating SSL

Postby Snowy » Mon Oct 06, 2014 1:01 pm

SapFans Moderator

Search: http://www.sapfans.com/forums/search.php
Notes: http://service.sap.com/notes
Help: http://help.sap.com
Rules: http://www.sapfans.com/forums/viewtopic.php?t=344127
Snowy
 
Posts: 28767
Joined: Mon Oct 21, 2002 2:33 pm
Location: 3.1415926535

Re: SAP Web Dispatcher - Activating SSL

Postby Zavaros » Tue Oct 07, 2014 4:18 am

Baz wrote:Hi
... and then goes via HTTP to Netweaver Gateway and then via trusted RFC to SAP ECC...


why do you need Sap Gateway?
What does generate the screens for the mobile device? Do you mean NetWeawer Mobile? ...

Can you link your topology? Is it something like this Technical System Landscape ?

Regards,
Zav
Zavaros
 
Posts: 756
Joined: Thu Oct 24, 2002 10:50 pm
Location: Hungary

Re: SAP Web Dispatcher - Activating SSL

Postby Baz » Wed Oct 08, 2014 2:11 am

Yes, we followed those steps, Snowy. i think the issue we have is with the the certificate. That's what i have asked them to look at.


We are using netweaver gateway as a hub between BAU and Project landscapes. we are using UI5/mobile and Fiori.... it is easier this way...
Baz

AsPiRiNg tUlY iDiOt Image

http://www.catb.org/~esr/faqs/smart-questions.html

Image

check out my Podcasts http://dj-baz.podomatic.com
Baz
 
Posts: 4736
Joined: Fri Nov 08, 2002 5:54 am
Location: He's out there! somewhere!!!!

Re: SAP Web Dispatcher - Activating SSL

Postby Zavaros » Wed Oct 08, 2014 4:51 am

hi,

I assume webdispatcher is using FQDN. Was the certificate generated for same FQDN?

we had issue that due to wrong CN in certificate the ICM worked very oddly : login screen appeared without problem. When you tried to login it hung and returned to login screen with no error message.

Regards,
Zav
Zavaros
 
Posts: 756
Joined: Thu Oct 24, 2002 10:50 pm
Location: Hungary

Re: SAP Web Dispatcher - Activating SSL

Postby Baz » Wed Oct 08, 2014 5:10 am

Thanks Zavaros. we should try that too to make sure.
Baz

AsPiRiNg tUlY iDiOt Image

http://www.catb.org/~esr/faqs/smart-questions.html

Image

check out my Podcasts http://dj-baz.podomatic.com
Baz
 
Posts: 4736
Joined: Fri Nov 08, 2002 5:54 am
Location: He's out there! somewhere!!!!


Return to Basis

Who is online

Users browsing this forum: No registered users and 6 guests





loading...


This website is not affiliated with, sponsored by, or approved by SAP AG.