28 Replies Latest reply: Aug 21, 2012 10:46 AM by Maris Sauka RSS

Safari OSX ans SAP service or SDN

Thierry Degay
Currently Being Moderated

Each time I try to connect to SDN or SAP services web site I have this problem :

" The page requires a valid SSL client certificate....

HTTP Error 403.16 - Forbidden: Client certificate is ill-formed or is not trusted by the Web server."

 

Do you have the same problem?

 

How to solve this issue?

  • Re: Safari OSX ans SAP service or SDN
    Satish Tummala
    Currently Being Moderated

    Thierry

     

    Welcome to SDN

     

    Yes it comes to me and as well as so many people. You could just click on OK and move forward.

     

    Hope this helps

    Thnaks

    Sat

  • Re: Safari OSX ans SAP service or SDN
    Anders Mørk
    Currently Being Moderated

    Hi there, I had the same problem and initially installed Firefox to get a certificate. I then made a backup of the certificate in Firefox and put the file into the keyring. That was it, and now Safari works for me on all the SAP sites that ask for my logon.

     

    Best regards,

    Anders

  • Re: Safari OSX ans SAP service or SDN
    Patrick Strebel
    Currently Being Moderated

    Couple of additional questions for anyone out there:

     

    a) did you import it into the login keychain or the system keychain?

     

    b) also, if you right click on the certificate with the Keychain app, and say "Get Info", the certificate comes up with "This certificate was signed by an unknown authority".  is this a problem?  does this need to be verified somehow?

     

    c) also, if you right click on the private key within the certificate,, and say "Get Info" and choose the "Access Control" tab, by default it says "Confirm before allowing access".  Should the other option of "Allow all application to access this item" be chosen instead?

     

    Frustrated along with everyone else, hate bringing up Firefox just to use sdn and marketplace.

     

    Cheers,

    Greg

    • Re: Safari OSX ans SAP service or SDN
      Patrick Strebel
      Currently Being Moderated

      Thought I'd see if anyone has had any more luck getting Safari to work with SDN?

       

      Cheers,

      • Re: Safari OSX ans SAP service or SDN
        Ken Merson
        Currently Being Moderated

        I'm replying from Safari 3.1 on OS X 10.4

         

        You need an installed client certificate as mentioned above. That goes in your keychain under My Certificates. The authority for that certificate (mine is SSO_CA) must have an entry in the trusted certificates list. In Keychain access, import into your x509 anchors a certificate for the root certificate authority (I exported mine from an IE session in windows).

        After these are in place, Safari should work with SDN.

        My Air apps are also running correctly with this in place.

         

        Hope this helps,

        km

    • Re: Safari OSX ans SAP service or SDN
      Ken Merson
      Currently Being Moderated

      a) did you import it into the login keychain or the system keychain?

       

      Login

       

      b) also, if you right click on the certificate with the Keychain app, and say "Get Info", the certificate comes up with "This certificate was signed by an unknown authority". is this a problem? does this need to be verified somehow?

       

      That is part two of my last post - you need to have the x509 cert installed to tell the browser you trust the certificate authority.

       

      c) also, if you right click on the private key within the certificate,, and say "Get Info" and choose the "Access Control" tab, by default it says "Confirm before allowing access". Should the other option of "Allow all application to access this item" be chosen instead?

       

      Mine is still set at Confirm.

      • Re: Safari OSX ans SAP service or SDN
        Patrick Strebel
        Currently Being Moderated

        Oddly enough, I never did get it to work.

         

        But, here I am typing this on Safari.  Always got so frustrated in brining up Firefox just for SDN, so once and a while I kept trying Safari just for the heck of it..... no luck until today.  Have no idea what the difference is, I never changed anything since trying the keychain changes months ago.

         

        Only thing that has happened has been Safari updates (3.1.1 build 5525.20) and Mac updates (10.5.3).

         

        Anyways, something changed either on my Mac side or the SDN/Marketplace side, as all is well.

         

        So, for those out there that might stumble across this thread, give your Safari another whirl!

         

        Cheers,

        Greg

  • Re: Safari OSX ans SAP service or SDN
    Bharath Rao
    Currently Being Moderated

    I cannot login into the SAP sites with Safari -

    https://sap.mymeetingroom.com/

    service.sap.com

     

    I get the certificate error. - The page requires a valid SSL client certificate

     

    Your client certificate is untrusted or invalid. A Secure Sockets Layer (SSL)client certificate is used for identifying you as a valid user of the resource.

     

    Like someone else has said here - I dont really want to switch to a different browser to get into the SAP sites.

    There should really be a way to add a certificate in safari?

  • Re: Safari OSX ans SAP service or SDN
    Martin Moser
    Currently Being Moderated

    I got the same problem and got it solved running OS X 10.8 with Safari 6.0 and Firefox 14.0.1
    (but should be working similar in OS X 10.7.x with Safari 5.x)

     

    GETTING THE SAP PASSPORT USING FIREFOX

    - Get Firefox 14.0.1 for Mac (unless you have it already installed) from getfirefox.com and install it

    - Use Firefox to navigate to service.sap.com using your SAP account (user/pwd) credentials

    - Apply for the SAP Passport

      (You get there by clicking on the top right link saying "Benefit from Single-Sign-On"

    - Install the certificate in Firefox

    - Restart Firefox to make sure it worked

    - Go to service.sap.com and make sure it is working

    ( it should offer the certificate that you just installed in the steps above )

     

    If it is not working in Firefox start from scratch as describe here.

     

    !! Continue reading only if your Firefox SAP Passport Logon works !!

     

    DOWNLOADING THE SAP PASSPORT

    - Go to Firefox -> Preferences

    - Choose Advanced -> Encryption -> View Certificates

    - In the tab "Your Certificates" select the one under "SAP Trust Community" and use the button "Backup..."

    - Choose a destination (e.g. your desktop) and use a password to store the certificate backup safely

     

    INSTALLING THE SAP PASSPORT IN MAC KEYCHAIN ACCESS APPLICATION

    - Now open "Keychain access" application in OS X

    - Drag and Drop the keychain file from the location before (e.g. Desktop) into the list of certificates offered

    - Now you should be prompted for the password that you just used before and eventually your computers's admin password in addition

    - If you see the certificate  under "SAP Passport CA" in the list you should be all set

    - Now open Safari and navigate to service.sap.com

    - You should be able to choose the SAP Passport certificate and login

     

    You can now safely delete the backed up certificate in your temporary location (e.g. desktop) or move it to a safe location like a pen drive.

     

    Good luck!

     

    Thanks,

    Martin

Actions