Parameter
icm/HTTPS/client_certificate_chain_header_prefix
Short text
Name of the HTTP header containing the prefix used for CA certificate
Parameter Description
Prefix for the CA certificate chains: the chain is structured from 1 to n, where n+1 is the last CA root certificate in the chain that is not sent to the server.
The server finds the chained certificates in the variables SSL_CLIENT_CERT_CHAIN_1, SSL_CLIENT_CERT_CHAIN_2, and so on.
The CA root certificate, which is the last certificate in the chain, is not sent to the server in a header field. It must exist as a trusted CA in the SSL provider service.
The parameter specifies the header field names that are used for SSL certificate forwarding. The SAP Web Dispatcher sets the fields and the ICM on the application server uses them.
Ensure that the parameters are set the same in the ICM and in the SAP Web Dispatcher. You should not change the default values unless absolutely necessary.
Application Area
Internet Communication Manager, SAP Web Dispatcher
Parameter Unit
None
Default Value
SSL_CLIENT_CERT_CHAIN_
Who is permitted to make changes?
Customer
Operating System Restrictions
None
Database System Restrictions
None
Are other parameters affected or dependent?
icm/HTTPS/client_certificate_header_name
icm/HTTPS/client_cipher_suite_header_name
icm/HTTPS/client_key_size_header_name
icm/HTTPS/trust_client_with_subject
icm/HTTPS/trust_client_with_issuer