Today we encountered an issue where some users were not able to do a punchout to the supplier. When supplier was contacted they confirmed that they have renewed their certificates few days back.
Thus we figured it out that ssl handhake between EBS and supplier site is not happening and we have to import the renewed certificate to our Apache certificate.
When a punchout is attempted to a supplier, using https, in order to create a Secure connection between the Oracle E-Business Suite Middle Tier Server and the Punchout Destination, the certificate must be present in the certificate file that is used by the E-Business Suite Middle Tier - Apache Web Server.
Below are the steps.
1. Get the punchout url. Login into EBS>iprocurement responsibility>home page>stores>current stores>identify the supplier >and click on update>punchout definition>copy punchout url.
2. Open the url in IE, choose the certificate and export it in X-509 Certificate with chain (PEM)
3. Save it in desktop
4. Now go to System Administrator - and move to Profile/System - to query on the Profile - POR: CA Certificate Filename. We will get value as $ORACLE_HOME/sysman/config/b64InternetCertificate.txt
5. Take a back up of this file and add the content of saved certificate to this file.
6. Bounced Apache and verified that the ebs is able to do a handshake now.
Thus we figured it out that ssl handhake between EBS and supplier site is not happening and we have to import the renewed certificate to our Apache certificate.
When a punchout is attempted to a supplier, using https, in order to create a Secure connection between the Oracle E-Business Suite Middle Tier Server and the Punchout Destination, the certificate must be present in the certificate file that is used by the E-Business Suite Middle Tier - Apache Web Server.
Below are the steps.
1. Get the punchout url. Login into EBS>iprocurement responsibility>home page>stores>current stores>identify the supplier >and click on update>punchout definition>copy punchout url.
2. Open the url in IE, choose the certificate and export it in X-509 Certificate with chain (PEM)
3. Save it in desktop
4. Now go to System Administrator - and move to Profile/System - to query on the Profile - POR: CA Certificate Filename. We will get value as $ORACLE_HOME/sysman/config/b64InternetCertificate.txt
5. Take a back up of this file and add the content of saved certificate to this file.
6. Bounced Apache and verified that the ebs is able to do a handshake now.
No comments:
Post a Comment