WebDisp and Wild Card certificate p7b import

[Ganimede-Dignan]

Hi,

how can I import an existing wild card certificate in .p7b format into a just installed Web Dispatcher 7.85?

Thank you.

[cris_hansen]

Hi Ganimede,

If you intend to use the certificate as a server certificate, then you need a pkcs#12 package. Only the p7b format is not sufficient. (I take for granted that the wildcard certificate was not generated based on a certificate request create in the web dispatcher itself).

If you have the pkcs#12 package, then you can import it to a PSE file, and then you can replace the (usually) SAPSSLS.pse file in the web dispatcher.

Regards,

Cris

[isaias_freitas]

Hi,

Complementing Cris' answer: SAP KBA 2148457.

Regards,

Isaías

[Ganimede-Dignan]

>If you intend to use the certificate as a server certificate

Yes!

>then you need a pkcs#12 package

...so I return to supplier/prvider and I ask a pkcs#12.

>(I take for granted that the wildcard certificate was not generated based on a certificate request create in the web dispatcher itself)

Yes! It was generated few months ago for a IIS web site.

>If you have the pkcs#12 package, then you can import it to a PSE file, and

>then you can replace the (usually) SAPSSLS.pse file in the web >dispatcher.

when I get a pkcs # 12 package, what procedure should I follow? Link?

Thank you.

[Ganimede-Dignan]

They have proposed me PKCS #7, could it be OK?

[isaias_freitas]

Hi!

Then you would likely be requesting a new certificate, is this correct?

If yes, create the certificate request through the Web Dispatcher admin UI itself.

You can then import the PKCS#7 response also through the admin UI.

Refer to the SAP wiki page https://wiki.scn.sap.com/wiki/x/tIahG, including the documentation referenced at the bottom ;-).

Regards,

Isaías

[Ganimede-Dignan]

>Then you would likely be requesting a new certificate, is this correct?

No.

[cris_hansen]

Hi Ganimede,

You can contact the provider/supplier and see whether they can send you the pkcs#12 package.

Since it is a wildcard certificate, it can be used then in multiple places. Be sure to save the package password in a secure location.

Regards,

Cris

[cris_hansen]

Hi Ganimede,

I forgot to mention: you can use this SAP Help page to import the pkcs#12 to a pse file:

https://help.sap.com/doc/saphelp_nw73ehp1/7.31.19/en-US/0d/9ce63bab134b39a52e340255d7650c/content.ht...

Regards,

Cris

[isaias_freitas]

Hi,

If you will not request a new certificate, do you still have the private key?

You need both (private key and the CA response in PKCS#7 format) to be able to create the PSE file...

Regards,

Isaías