Trying to integrate with SAP - Need Certificate

[akhil19]

Hi,

I am trying to integrate with SAP Transport but we need to install the certificate from ServiceNow for the connection to work.

I tried to download the SN certificate from the browser but it comes up as untrusted.

Does anybody know the place from where we should be downloading it ?

Thank

[tony_barratt]

Hi Akhilesh,

There is some info on the SSL cert for SeviceNow here:

SSL Certificate Information - ServiceNow Wiki

Evidently every time you connect to your instance via https you do dynamically download the cert.

If you download the Cert and hardcode it somewhere, if the cert changes on the ServiceNow side the integration will will no longer function.

Best Regards

Tony

[akhil19]

I was able to get the Cert and get it installed on SAP.

But the SAP system is throwing up the error "SSSLERR_PEER_CERT_UNTRUSTED".

[tony_barratt]

Hi Akhillesh,

Inbound SOAP Web Service Security - ServiceNow Wiki

..

ServiceNow supports mutual authentication for outbound web services. Mutual authentication is not available for inbound web services.

You do mention here:

Obtaining Client/Server Certificates for SOAP Mutual Authentication

That you are implementing inbound, to the instance ,SOAP.

I think SSSLERR_PEER_CERT_UNTRUSTED error message is a symptom of mutual authentication not being available.

Best Regards

Tony

[Jace Benson]

I Also have had to deal with mutual soap messages for an integration with entrust. To get that to work we had to actually do the soap calls on our midserver in a odd way. I'll add more to this tomorrow.