How to use HP SM Web Service via SSL? (303 Views)
Reply
Advisor
Portal230
Posts: 39
Registered: ‎01-09-2014
Message 1 of 6 (303 Views)
Accepted Solution

How to use HP SM Web Service via SSL?

Hello Community.

I have integration with external web services system.  External web service required SSL connection. I use OpenSSL tools and add cert file for External system  into Cacerts file. In sm.ini i write

truststoreFile:cacerts

truststorepass: changeit

Its works. I can export my data into web service External System.

 

External system export data into  HP Service Manager and used my web services HPSM. External system can work with my web service only via SSL.

I try to configure it but nothing happens.

I requested a certificate for my server HP SM. Colleagues provided file: cert.crt

Then using Open SSL and add thesi cert file into cacerts, servercert.keystore, trustedclient.keystore, clientcerts.keystore

This parameters i add in sm.ini file

httpsPort:13443

sslConnector:1

ssl:1

ssl_reqClientAuth:0

keystoreFile:servercert.keystore

keystorePass:p@ssw0rd

ssl_trustedClientsJKS:trustedclients.keystore

ssl_trustedClientsPwd:p@ssw0rd

truststoreFile:cacerts

truststorePass:changeit

But i can't connect to my server with Full Client. I do not need to use SSL for users connection. I need uses SSL for integration with external web service and HP SM.

Tell me please how to properly configure my system HP Service Manager 9.21 patch 8?

 

 


 

Please use plain text.
Honored Contributor
DimitarPeychev
Posts: 292
Registered: ‎11-01-2011
Message 2 of 6 (298 Views)

Re: How to use HP SM Web Service via SSL?

[ Edited ]

Hi Portal 230,

 

I am sending you web servce best practice guide attached.  You can find information starting on page 51 - It will help you by configuring your system 

You need to follwo chapter - Using SSL to consume Service Manager Web Services

I hope this will help you :)

HP Support
If you find that this or any post resolved your issue, please be sure
to mark it as an accepted solution.
Please also give kudo if you find it interesting :)
Please use plain text.
Advisor
Portal230
Posts: 39
Registered: ‎01-09-2014
Message 3 of 6 (273 Views)

Re: How to use HP SM Web Service via SSL?

[ Edited ]

Thank you for reply.

 

Sorry, but this document is not help me.

For configure certificates I used Trusted Sign-on White paper.

 

Maybe mistake in my sm.ini file?

 

# ServiceManager Initialization file

# (c) Copyright 2008 Hewlett-Packard Development Company, L.P.

# Configuration Modified Date:08.08.12 9:59

shared_memory:32000000

log:../logs/sm.log

 

system:13080

 

#httpPort:13080

httpsPort:13443

 

language:UTF8

[sqlserver]

sqldb:hpsm921

sqllogin:sa/***

querysecurity:0

sqldictionary:sqlserver

plugin0:kmplugin.dll

webservices_sessiontimeout:1800

threadsperprocess:30

ir_asynchronous:1

trustedsignon:1

sslConnector:1

ssl:1

ssl_reqClientAuth:0

keystoreFile:servercert.keystore

keystorePass:p@ssw0rd

ssl_trustedClientsJKS:trustedclients.keystore

ssl_trustedClientsPwd:p@ssw0rd

truststoreFile:cacerts

truststorePass:changeit

 

 

 

Please use plain text.
Honored Contributor
DimitarPeychev
Posts: 292
Registered: ‎11-01-2011
Message 4 of 6 (262 Views)

Re: How to use HP SM Web Service via SSL?

Hi again,

 

 I am sending you three other files that should help you. Two of them are guides and the .rar file is the file ,wich you should use to generate the certificate. - BTO_Cert_Gen_V1.0_2012-12-18.zip

HP Support
If you find that this or any post resolved your issue, please be sure
to mark it as an accepted solution.
Please also give kudo if you find it interesting :)
Please use plain text.
Trusted Contributor
dpetrich
Posts: 63
Registered: ‎07-06-2011
Message 5 of 6 (249 Views)

Re: How to use HP SM Web Service via SSL?

[ Edited ]

Per the help file:

SSL: This parameter defines whether the Service Manager server requires SSL connections from all incoming client requests. Enable this parameter to require all clients to use SSL connections. Unless you also require each client to have its own certificate, clients can connect to the server using anonymous SSL.

If you do not require all clients to use https, remove the following line from your .ini file
ssl:1

I should caution that now your WSDL could potentially be accessed by http.  You should be able to import your securitycert to the full client and then you should be able to access SM without having to remove the ssl parameter.

Please use plain text.
Advisor
Portal230
Posts: 39
Registered: ‎01-09-2014
Message 6 of 6 (214 Views)

Re: How to use HP SM Web Service via SSL?

Thank you very much.

This doc's helped me configured sm.ini and sm.cfg files.

I used TSO_LWSSO_Conf_guide for create certs.

For my task needed connect to external web sevice and used other certificate. I added certificate external system in file cacerts. All work properly.

 

 

Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation