Creating a Destination in SAP for Making Requests to HTTPS Secured APIs

This is a walkthrough showing how to create an HTTPS destination in SAP in order to call an external API from your ABAP code.

The Problem

If you just plug in an HTTPS URL for an API endpoint and fire away, you’ll likely run into:

cl_http_client=>create_by_url(
  EXPORTING
    url    = lv_url
  IMPORTING
    client = http_client
).

http_client->receive(
  EXCEPTIONS
    http_communication_failure = 1
    http_invalid_state         = 2
    http_processing_failed     = 3
    others                     = 4
).

The HTTP_COMMUNICATION_FAILURE exception isn’t very descriptive. Let’s fix it.

The Solution

Instead of using create_by_url, you can use:

cl_http_client=>create_by_destination( )

But to do that, we need to first create a destination with SSL support.

Steps Overview

• Create the destination in SM59
• Add SSL certificates in STRUST
• Test the connection

Create the Destination Connection

• Go to transaction: SM59
• Click Create

Create Destination Popup

• Destination: Any name you want
• Connection Type: G – HTTP connection to external server
• Click Continue

RFC Destination Screen – Technical Settings Tab

• Description 1: Short explanation
• Host: Domain of the API (e.g., api.example.com)
• Port: 443 (default for HTTPS)
• Path Prefix: Optional base path (e.g., /v1/endpoint)

RFC Destination Screen – Logon & Security Tab

• SSL: Active
• SSL Certificate: ANONYM SSL Client (Anonymous)

Note: If you test now, it will fail. You still need to import the SSL certificates.

Adding SSL Certificates

You’ll need to download the public certificates from the API domain and import them into SAP.

Downloading the Certificates

1. Open the API in your browser
2. Click the lock icon in the address bar
3. Click Connection is secure → Certificate is valid
4. Go to the Details tab
5. Export each certificate in the chain
6. Save them to your computer

Importing into SAP via STRUST

1. Go to transaction: STRUST
2. Expand: SSL client SSL Client (Anonymous)
3. Select your system
4. Click the bottom-left Import Certificate button
5. Click Add to Certificate List
6. Repeat for all certificates

Test the Connection

• Return to SM59
• Open your destination
• Click Connection Test

You should see a success message. Now you can use it in code like this:

cl_http_client=>create_by_destination(
  EXPORTING
    destination = 'EXAMPLE_DESTINATION_NAME'
  IMPORTING
    client      = http_client
).