SOAP Receiver Adapter problem (client certificate required)

[AbinashNanda]

My Scenario is similar to described in https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/3721. [original link is broken] [original link is broken] [original link is broken] I have two PI servers running on one machine. I am trying to post message HTTPS with Client authentication via SOAP adapter from one PI system to SOAP adapter of other PI server. I have done the following configuration.

PI Server AXD - (Client) - Receiver SOAP adapter

PI Server AXQ - (Server) - Sender SOAP Adapter.

Steps in AXD

1. I have created a certificate of AXD in the service_ssl view of key storage.

2. I have imported the AXQ public certificate in to AXD in the TrustedCAs of Key storage

Steps in AXQ

1. I have created a certificate of AXQ in the service_ssl view of key storage.

2. I have imported the AXD public certificate in to AXQ in the TrustedCAs of Key storage.

3. I have created a user in AXQ and assigned the certificate of AXD under usermangement in Security provider to this user.

4. I have added the AXD certificate under Client Authentication tab with require client certificate option checked in the SSL Provider.

5. I have assigned the user created in AXQ in the step above to the Sender Agreement.

Now when I post message from AXD with Configure Client Authentication checked (Here I have selected the certificate of AXD and view as service_ssl) I am getting the following error.

Exception caught by adapter framework: SOAP: response message contains an error XIServer/UNKNOWN/ADAPTER.JAVA_EXCEPTION - java.security.AccessControlException: client certificate required at com.sap.aii.af.mp.soap.ejb.XISOAPAdapterBean.process(XISOAPAdapterBean.java:884) at com.sap.aii.af.mp.module.ModuleLocalLocalObjectImpl0_3

Any pointer to solve this problem is highly appreciated.

Thanks

Abinash

[hemant_chahal]

Hi

Import certificate for SOAP WS-Security

The certificate of a business partner used for WS-Security is stored in the KeyStorage of the de-central Adapter Framework under TRUSTED/WebServiceSecurity.

Please Reward Points if helpful

[AbinashNanda]

Hi Hemant,

I have couple of questions. Why do we need to import certificate for SOAP WS-Security and from where I can get it?

As far as my scenario goes I am not using message level security.

Secondly what do you mean by TRUSTED/WebServiceSecurity? I don't see any such view inside the Key Storage. I can see a view named just WebServiceSecuity though.

Also I don't have a decentralized adapter installation rather I have two separate PI instances having their own central adapter engine.

Abinash