icm/HTTPS/ client_certificate_chain_header_prefix

Parameter

icm/HTTPS/client_certificate_chain_header_prefix

Short text

Name of the HTTP header containing the prefix used for CA certificate

Parameter Description

Prefix for the CA certificate chains: the chain is structured from 1 to n, where n+1 is the last CA root certificate in the chain that is not sent to the server.

The server finds the chained certificates in the variables SSL_CLIENT_CERT_CHAIN_1, SSL_CLIENT_CERT_CHAIN_2, and so on.

The CA root certificate, which is the last certificate in the chain, is not sent to the server in a header field. It must exist as a trusted CA in the SSL provider service.

The parameter specifies the header field names that are used for SSL certificate forwarding. The SAP Web Dispatcher sets the fields and the ICM on the application server uses them.

Ensure that the parameters are set the same in the ICM and in the SAP Web Dispatcher. You should not change the default values unless absolutely necessary.

Application Area

Internet Communication Manager, SAP Web Dispatcher

Parameter Unit

None

Default Value

SSL_CLIENT_CERT_CHAIN_

Who is permitted to make changes?

Customer

Operating System Restrictions

None

Database System Restrictions

None

Are other parameters affected or dependent?

icm/HTTPS/client_certificate_header_name

icm/HTTPS/client_cipher_suite_header_name

icm/HTTPS/client_key_size_header_name

icm/HTTPS/trust_client_with_subject

icm/HTTPS/trust_client_with_issuer

You May Also Like

Leave a Reply?