Preparing the SAP NetWeaver Developer Studio for SSL 

Use

In a similar way to a Web browser, the SAP NetWeaver Developer Studio uses the standard protocol HTTP and basic authentication to exchange data with the services of the development infrastructure. This protocol is not encrypted, which means that data and passwords are susceptible to access by unauthorized persons. The communication between the Developer Studio and the SAP NetWeaver Development Infrastructure (NWDI) represents a weak point if it is running through non-secure channels (such as the Internet).

To secure the communications, activate the Secure Socket Layer (SSL) protocol in the Developer Studio. This protocol provides powerful encryption of data traffic and reliable authentication of the communication partners.

Prerequisites

To be able to use SSL in the Developer Studio, you must first configure the servers of the NWDI for SSL. In particular, all servers require a valid certificate. These certificates must be accessible to all users who want to log on to the infrastructure using SSL. The Developer Studio currently supports the following exchange formats for certificates:

●      PKCS 7: This is the standard format for exchanging server certificates. This format is supported by most Internet browsers and Public Key environments. Files in PKCS 7 format usually have the file extension .p7b.

●      PKCS 12: This format is used to store client certificates and private keys. Files in PKCS 12 format have the file extension .p12 or .pfx.

●      Java Keystores. The Java runtime environment defines a separate format for storing certificates, and provides you with tools for managing key stores (key tools). Java runtime environments also provide you with a default key store (cacerts). You can import your own certificates into this key store.

You must also configure the usage of SSL on the Application Server Java (AS Java).

Procedure

Due to export restrictions and legal requirements in some countries, the SAP NetWeaver development environment is shipped without the cryptographic algorithms required for SSL. You must install these algorithms before you activate SSL in the Developer Studio.

...

       1.      To enable usage of SSL in NWDS you have to import the required security libraries from AS Java. For more information, see SAP Note 1444892.

       2.      (Only if you use J2SE from Version 1.4) Prepare the Java runtime environment for using strong cryptography by installing special Java Cryptography Extensions (JCE) from java.sun.com/jce.

       3.      Start the Developer Studio and choose File ® Import ® Java Cryptography Toolkit. Choose Next. Enter the path to the downloaded cryptography library or navigate to this location in your file system by choosing Browse…Complete the dialog.

       4.      Restart the Developer Studio.

       5.      From the menu path, choose Window ® Preferences ® Java Development Infrastructure. Under Certificates, specify the path to a file with certificates in PKCS7 or PKCS12 format, or the path to a Java key store. To confirm your entries, choose OK.