Using the Cryptography Tool 
Purpose
You use the following tools for configuring and managing secure communication:
· The Cryptography Tool SAPGENPSE
· SAP J2EE Engine Visual Administrator
· Cryptography software for Apache Web Server
The Cryptography Tool SAPGENPSE
The cryptography tool SAPGENPSE consists of the following files:
Windows |
UNIX |
sapcrypto.dll (Library) sapgenpse.exe (executable file) |
libsapcrypto.<ext>, sapgenpse (executable file). |
ticket (license ticket) |
ticket (license ticket) |
You can use the cryptography tool SAPGENPSE to configure secure communication between the TREX preprocessor and the portal Web server, and between the TREX Web server and the TREX name server. You download SAPGENPSE as part of the SAP Cryptographic Library in the SAP Service Marketplace.
Process Flow
Carry out the following steps to make SAPGENPSE available.
...
1. Download SAP Cryptographic Library
2. Configure SAPGENPSE for Use
If you are using SAPGENPSE for the configuration, you should read the information on using keystores.
SAP J2EE Visual Administrator and SAP JAVA Cryptographic Toolkit
· SAP J2EE Engine Visual Administrator
You can use the J2EE visual administrator to configure secure communication between the TREX Web server and the TREX Java client in the application using TREX.
· SAP Java Cryptographic Toolkit
As of SAP NetWeaver 2004s, the SAP J2EE Engine is delivered as standard with the SAP Java Cryptographic Toolkits including the policy files.
For more information, see:
·
SAP J2EE Engine Visual
Administrator
·
SAP J2EE Engine
Security ® Transport Layer Security on the SAP J2EE Engine
® Configuring the Use of
SSL on the SAP J2EE Engine ® Deploying the SAP
Java Cryptographic Toolkit
·
Configuring the Use of
SSL on the J2EE Engine
Cryptography software for Apache Web Server
You configure the Apache Web server, which communicates with the CM Java client as the TREX Web server, using the cryptography tool OpenSSL. You use a build process to generate the tool OpenSSL and the library mod_SSL.so, which you need for the security configuration of the Apache Web server. For the build process, you need the software packages OpenSSL and mod_SSL and the package of the corresponding Apache Web server. You download these software packages from the Web pages of the Apache Open Source project. You then start the build process using the build script build_ssl.sh.
Required Software
You need the following software for the build process:
Software |
Naming |
Available From |
OpenSSL package |
openssl-0.9.7c |
www.openssl.org/source |
modSSL package |
mod_ssl-2.8.16-1.3.29 |
www.modssl.org/source |
Apache Web server package |
apache_1.3.29 |
www.apache.org/dist/httpd |
Build script |
build_ssl.sh |
Attachment to SAP Note 620169 TREX 6.0/6.1/7.0: SSL and HTTPS for Apache Web Server |
Process Flow
See Providing Cryptography Software for Apache Web Server.