Secure Data Transfer 

SSL

For transport security, the SSL Protocol (Secure Socket Layer) is supported by the SAP Web AS and the Web Service Proxy. In this way, all the data for a Web service call can be transmitted between client and server in encrypted form.

For more information, refer to the chapter Configuring the SAP Web AS for  SSL Support.

Configuration at Design Time

·        Web Service

To ensure secure transfer of data for all configurations of the Web service  (see Creating a Web Service Definition), choose the feature Transport Guarantee in the Web service definition. Then choose Integrity.

·        Web Service Proxy

The Web service called by the proxy must support SSL and contain a URL that begins with https. Except for the entry of a URL beginning with https://, no other configurations are required at design time.

Configuration at Runtime

·        Web Service Proxy

As part of the activation of an SSL connection, the SSL server certificate is returned. The list of trusted server certificates must be maintained in the Trust Manager (see: Configuring the SAP Web AS for SSL Support).