Wednesday, 26 October 2016

Secure your HANA Cloud Connector with OpenSSL certificates – Part 1

Out of the box, the HANA Cloud Connector (SCC) is not secure, as clearly documented by the General Security Status:

Secure your HANA Cloud Connector with OpenSSL certificates – Part 1

As mentioned in the General Security Status, the out of the box SSL certificate does not use the host name as its common name (CN) and is therefore not trusted:

Secure your HANA Cloud Connector with OpenSSL certificates – Part 1

It is still possible to work with the SCC in this state via a browser security exception, but I will show how to properly secure the connection.

First I crate a Certificate Signing Request (CSR) with the correct hostname as CN:

Secure your HANA Cloud Connector with OpenSSL certificates – Part 1

And save it as a file:

Secure your HANA Cloud Connector with OpenSSL certificates – Part 1

I then import this file into TinyCA:

Secure your HANA Cloud Connector with OpenSSL certificates – Part 1

And check that the details are correct:

Secure your HANA Cloud Connector with OpenSSL certificates – Part 1

Next, I sign the request:

Secure your HANA Cloud Connector with OpenSSL certificates – Part 1

And export the resulting certificate to file:


After importing it into my SCC:

SAP HANA Certifications

I restart my SCC and the connection becomes secure:

Secure your HANA Cloud Connector with OpenSSL certificates – Part 1

Given that my CA certificate had already been imported into my browser:

Secure your HANA Cloud Connector with OpenSSL certificates – Part 1

And of course I also get my green light for the UI Certificate in the General Security Status:

Secure your HANA Cloud Connector with OpenSSL certificates – Part 1

Source: scn.sap.com

6 comments:

  1. Great blog thanks for sharing Your website is the portal to your brand identity. The look and feel of every page carry a strong message. This is why your brand needs the best web design company in chennai to capture your visions and make it art.

    ReplyDelete
  2. Nice blog thanks for sharing Growing your own plant comes with its own challenges and responsibilities. This is why you need a plant nursery in chennai who is ready to help you out throughout the way and guide you through the hurdles of growing a plant - Enter Karuna Nursery Gardens.

    ReplyDelete
  3. Excellent blog thanks for sharing Pixies Beauty Shop is unlike any of the other cosmetic shops in Chennai. With tons of exclusive imported brands to choose from and the best value, this is the best shopping destination for your personal and salon needs.

    ReplyDelete
  4. Awesome blog thankks for sharing 100% virgin Remy Hair Extension in USA, importing from India. Premium and original human hair without joints and bondings. Available in Wigs, Frontal, Wavy, Closure, Bundle, Curly, straight and customized color hairstyles Extensions.

    ReplyDelete
  5. Very useful blog thanks for sharing IndPac India the German technology Packaging and sealing machines in India is the leading manufacturer and exporter of Packing Machines in India.

    ReplyDelete