Generate certificate for SSO2 Generator (DSA)

To generate certificate for SSO2 Generator DSA:

  1. In command prompt, execute openssl dsaparam -out dsaparam.pem 2048.
    Figure 1. DSA Parameter Command
    DSA Parameter Command
  2. Create a new DSA key based on the parameters:
    openssl gendsa -out smp_sso2.pem dsaparam.pem
    Figure 2. Create DSA Key
    Create DSA Key
  3. Create a self-signed certificate. The common name should match with the SID of your system, for example, SMP.
    openssl req -days 730 -x509 -new -key smp_sso2.pem -out smp_sso2.cer
    Figure 3. SSO2 - Self-signed Certificate
    SSO2 - Self-signed Certificate

    The output shown here is the certificate (public part), which you import later in your backend system.

    Note: As the Issue SID for SAPSSO2 Generator accepts only three characters with capital letters, use SMP for testing.
  4. Create a keypair (PKCS12 keystore) and import this keypair into SMP keystore. (Define a password for this keystore). The attribute name defines the alias of the keypair inside this keystore.
    openssl pkcs12 -export -in smp_sso2.cer -name smp_sso2 -inkey smp_sso2.pem -out smp_sso2.p12
    Figure 4. PKCS12 keypair command
    PKCS12 keypair command