Lately I was playing around with HCP and Olingo and wanted to expose a JPA model as OData. I created some data using EJB and then tried to read this data via OData. Accessing the collection gave me a list of created entities: To access one entity, it is just Read more…
Scenario SAP releases a software development kit (SDK) for its SAP Mobile Platform 3 (SMP3) to enable developers to efficiently create apps. The SDK is not a static product but is actively developed and supported by SAP. This means that a SDK receives constant updates and patches. Problem The above Read more…
Scenario Cordova is used as the de-facto standard software for creating hybrid mobile apps. To keep up with mobile platforms, a new version of Cordova is released constantly. This creates a certain challenge for mobile app developers that have to not only create new apps, but also have to maintain Read more…
Installing SMP3 came with an OS pre-requisite check in previous versions. This means that you could not simply install SMP3 in a not-supported OS. The installer refused to continue the installation. Makes sense when installing it in a landscape, less sense when you want to install it on your laptop Read more…
For the user to able to log on with his client certificate, SAP Web Dispatcher (WD) must forward it. In a SSL termination scenario, this means that the WD is authenticating itself against a SAP backend, and repasses the client certificate of the user inside a header. SAP Help. This Read more…
For SAP Web Dispatcher be able to forward the received client certificate received by the browser, it must Re-encrypt the connection Add the client certificate as a header in the request To ensure the connection is forwarded encrypted via TLS, use the parameter wdisp/ssl_enrypt=2. Value 2 means that WD will Read more…
For the backend SAP NetWeaver ABAP system to trust the WD client certificate, it must be imported into the PSE. I am not 100% sure about this, as importing the root CA certificate should also do the trick. Transaction: STRUST Change to edit mode: Select SSL standard server Import WD Read more…
For the NetWeaver ABAP system to be able to accept the certificate based logon from Web Dispatcher, it must be configured to accept the certificate of the WD system as a client certificate. SAP Help Transaction: RZ10 Instance profile It is necessary to maintain 2 profile parameters: icm/HTTPS/trust_client_with_issuer icm/HTTPS/trust_client_with_subject These Read more…
OK, now it will get complicated. Certificate based logons do not really like reverse proxies. First step is to ensure that the client has a certificate that is accepted by the SAP NetWeaver ABAP PSE. For this, the certificate must be signed by a CA that the ABAP PSE trusts. Read more…
One of the more secure ways to authenticate you is to use a user certificate for logon. A pre-requisite for this is to have ICF running on HTTPS, with a valid server side certificate. How to do this was already discussed and showed here. Next pre-requisite is of course to Read more…