Manually configure SSL on the AS Java

[former_member745782]

hello,

i work with a sap portal 7.3

We want switch from http to https.

What's the correct procedure?

[former_member337476]

Hi Alessandro,

Can you please tell me how did you do the conversion from http to https . I have the same issue

Thanks and Regards

Madhu

[vijay_kumar49]

Hi,

Please read this documents [Switching from HTTP to HTTPS in NW7.0 Portal|http://forums.sdn.sap.com/thread.jspa?threadID=1911476] and [Change Portal URL|http://wiki.sdn.sap.com/wiki/display/EP/ChangePortalURL]

Hope this helps!!

Best Regards

Vijay K

[former_member745782]

thanks so much to both!

i find my answers

[Former Member]

Alessandro,

you can also consider using a SAP Web Dispatcher to handle the SSL. You should get a better performance especially if you have to consider many hundreds of concurrent users, since it's not handled in Java there.

[former_member745782]

ok thanks!

[Former Member]

Hi Alessandro,

here is the link - wiki.scn.sap.com/wiki/display/ASJAVA/Manually+configure+SSL+on+the+AS+Java

Manually configure SSL on the AS Java

   Skip to end of metadata  

•   
•    Attachments:1  
• Added by Victor Chang, last edited by Victor Chang on Nov 13, 2013 (view change)

   Go to start of metadata  

Purpose

This document introduces the all steps about how to implement SSL mannually

• Users want to implement accessing AS Java via SSL (Secure Sockets Layer)
• Access AS Java from https protocal.
  for example:  https://hostname:50001/irj (instead of http://hostname:50000/irj)Create key pair steps.doc

From NetWeaver 7.2 and higher release,  you can use SSL configuration tool instead.

Precedure

1. Maintain ICM Parameters for Using SSL :

• Find instance profile /usr/sap/<SID>/SYS/profile/<SID>_<instance>_<hostname>
• Add icm/server_port_<xx> and ssl/ssl_lib in to this proile.
• Restart the ICM

      * Please refer to document Maintaining ICM Parameters for Using SSL for detail

2. Open NWA Key storage:
http://<portal_hostname>:<port>/NWA > Configuration Management >  Certificates and Keys

3. Backup ICM_SSL_<instance_ID> view
    <Caution> By default, the AS Java uses the ICM_SSL_<instance_ID> view for setting up an SSL connection.

4. Generat the New Key Pair (private key and certificate)

• Find the ICM_SSL_<instance_ID> view, or ICM_SSL_<instance_ID>_<port>
• Delete for the existing AS Java key pair entry
• Create new key pare by clicking "Creat" button.

      * You may find more detail information regarding

• How to Creating a Key Pair and Public-Key Certificate
• How to Configuring the Use of SSL on the AS Java
• There is a attachment "Create key pair steps.doc" in this KBA.

After that 2 entry should been generated:

ssl-credentials

ssl-credentials-cert

5. Sign it by CA

• Clicking "Cenerate CSR Request" to download the entey.
• Send the request file to CA vendor.
• Import the CA response file by "Import CSR Response" or "Import Entry"

Please also refer to the screenshot in attachment Create key pair steps.doc.

Regards,

Mohan.

[Former Member]

Hi,

Check this wiki linking for enabling SSL on the J2ee engine. For portal 7.3, the VA tasks listed will have to be done through NWA, the rest being the same.

[http://wiki.sdn.sap.com/wiki/display/EP/ConfiguringtheUseofSSLontheSAPJ2EE+Engine]

Thanks,

Prathamesh

[Former Member]

Hi Prathmesh ,

Link is not working...

regards

Matt