My Client already has SSL active in the SAP PI system SAP NW 7.3 with relevant SSL PSE and RFC to communicate with HRMC
ssf/name = SAPSECULIB
ssf/ssfapi_lib = $(DIR_EXECUTABLE)$(DIR_SEP)$(FT_DLL_PREFIX)sapcrypto$(FT_DLL)
sec/libsapsecu = $(DIR_EXECUTABLE)$(DIR_SEP)$(FT_DLL_PREFIX)sapcrypto$(FT_DLL)
ssl/ssl_lib = $(DIR_EXECUTABLE)$(DIR_SEP)$(FT_DLL_PREFIX)sapcrypto$(FT_DLL)
2216791 - HR GB: e-Filing to HMRC moves from SSL to TLS
As per note 510007 - Setting up SSL on Application Server ABAP
It says to enable TLS implement 2 profile param
ssl/ciphersuites = 135:HIGH:MEDIUM:+e3DES
ssl/client_ciphersuites = 208:HIGH:MEDIUM:+e3DES
My query is how do we confirm that HMRC site will use TLS Protocol instead of SSL post 30th Sept
Do we need to update the PSE certificate as well.
Coz after restart, dev_icm doesn't talk about TLS
=================================================
[Thr 7592] = SSL Initialization platform tag=(ntamd64-msc16)
[Thr 7592] = (722_REL,May 17 2015,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)
[Thr 7592] profile param "ssl/ssl_lib" = "D:\usr\sap\XXX\DVEBMGS02\exe\sapcrypto.dll"
[Thr 7592] resulting Filename = "D:\usr\sap\XXX\DVEBMGS02\exe\sapcrypto.dll"
[Thr 7592] = found CommonCryptoLib (SAPCRYPTOLIB) Version 8.4.36 pl40 (Apr 30 2015) MT-safe
[Thr 7592] = current UserID: XXX\SAPServiceXXX
[Thr 7592] = found SECUDIR environment variable
[Thr 7592] = using SECUDIR=D:\usr\sap\XXX\DVEBMGS02\sec
[Thr 7592] = Success -- SapCryptoLib SSL ready!
[Thr 7592] =================================================
Regards,
Rupali S