From fa2c00a0d7a28612430da48c611bdc53ed37a125 Mon Sep 17 00:00:00 2001 From: larshp Date: Sun, 25 Feb 2018 08:21:22 +0000 Subject: [PATCH] docs: github TSL #1225 --- docs/guide-install.md | 38 +----------------------------- docs/guide-ssl-setup.md | 52 +++++++++++++++++++++++++++++++++++++++++ 2 files changed, 53 insertions(+), 37 deletions(-) create mode 100644 docs/guide-ssl-setup.md diff --git a/docs/guide-install.md b/docs/guide-install.md index 352a352ee..847396d8d 100644 --- a/docs/guide-install.md +++ b/docs/guide-install.md @@ -11,43 +11,7 @@ To use the online feature, SSL must be setup. Offline projects will work behind ## STRUST/SSL setup(online projects only) ## -##### Option A - Chrome ##### - -1. On chrome, go to https://github.com -2. Click on the locker near the address bar, then click on "Details" -3. The developer tools will open at the Security tab. Click on "View certificate" -4. Go to the "Details" tab and click on "Copy to file..." to export to a .CER file -5. Open the "Certification path" tab and navigate to the parent node at the tree, do this until the root - - -##### Option B - Firefox ##### -1. Use Firefox to go to https://github.com -2. Click on the lock icon and then "More Information ..." and there "View Certificate" -3. Switch to the Details Tab and choose the first certificate of the tree and click Export -4. Do the same for the next certificate in the tree - -##### Option C ##### -1. Goto github, find the certificate that it is using -2. Download certificate from https://www.digicert.com/digicert-root-certificates.htm - -##### Then continue here ##### -1. Install the certificates in STRUST transaction: -* Click on the Change button -* Open "SSL System Client SSL Client (Anonymous)" folder -* In the third box, Certificate, click on the bottom-left button "Import certificate" and "Add to certificate list". -* Upload all the downloaded certificates -* Save - -![](img/strust1.png) - -Report [ZABAPGIT_TEST_SSL](./other-test-ssl.html) can be used to verify that the connection works. - -Also see blogs -* http://scn.sap.com/people/jens.gleichmann/blog/2008/10/31/calling-webservices-from-abap-via-httpsssl-with-pfx-certificates -* http://scn.sap.com/people/thomas.jung/blog/2004/11/17/bsp-a-developers-journal-part-xiv--consuming-webservices-with-abap - -The certificate list should end up looking something like this: -![](img/strust.png) +[SSL setup](guide-ssl-setup.html) ## Proxy setup(online projects only) ## If your server is behind a proxy, it can be configured under Advanced -> Settings, diff --git a/docs/guide-ssl-setup.md b/docs/guide-ssl-setup.md new file mode 100644 index 000000000..f2d66b0cb --- /dev/null +++ b/docs/guide-ssl-setup.md @@ -0,0 +1,52 @@ +--- +title: SSL setup +category: online projects +order: 70 +--- + +##### Option A - Chrome ##### +1. On chrome, go to https://github.com +2. Click on the locker near the address bar, then click on "Details" +3. The developer tools will open at the Security tab. Click on "View certificate" +4. Go to the "Details" tab and click on "Copy to file..." to export to a .CER file +5. Open the "Certification path" tab and navigate to the parent node at the tree, do this until the root + +##### Option B - Firefox ##### +1. Use Firefox to go to https://github.com +2. Click on the lock icon and then "More Information ..." and there "View Certificate" +3. Switch to the Details Tab and choose the first certificate of the tree and click Export +4. Do the same for the next certificate in the tree + +##### Option C - Manual ##### +1. Goto github, find the certificate that it is using +2. Download certificate from https://www.digicert.com/digicert-root-certificates.htm + +##### Then continue here ##### +1. Install the certificates in STRUST transaction: +* Click on the Change button +* Open "SSL System Client SSL Client (Anonymous)" folder +* In the third box, Certificate, click on the bottom-left button "Import certificate" and "Add to certificate list". +* Upload all the downloaded certificates +* Save + +![](img/strust1.png) + +Report [ZABAPGIT_TEST_SSL](./other-test-ssl.html) can be used to verify that the connection works. + +Also see blogs +* http://scn.sap.com/people/jens.gleichmann/blog/2008/10/31/calling-webservices-from-abap-via-httpsssl-with-pfx-certificates +* http://scn.sap.com/people/thomas.jung/blog/2004/11/17/bsp-a-developers-journal-part-xiv--consuming-webservices-with-abap + +The certificate list should end up looking something like this: +![](img/strust.png) + +### GitHub +On [Feburary 22nd]{https://githubengineering.com/crypto-removal-notice/}, GitHub deprectated weak TSL connections. + +See SAP note 510007, section 7, for information on how to configure SSL. + +Add parameters +``` +ssl/client_ciphersuites = 150:PFS:HIGH::EC_P256:EC_HIGH +ssl/ciphersuites = 135:PFS:HIGH::EC_P256:EC_HIGH +``` \ No newline at end of file