HTTP tunneling
For SSL to work properly, HTTP tunneling must be enabled. Clients use HTTP tunneling to
connect to the server via SSL.
HTTP tunneling is enabled by default. No user action is required.
Adding the required SSL tags in the Adaptor.xml file
All SSL tags in the Server.xml file are included by default. Not all of the required SSL tags in
Adaptor.xml are present by default, however.
You need to insert the following SSL-specific tags in the Adaptor.xml file.
<SSL>
<SSLServerCtx>
<SSLCertificateFile></SSLCertificateFile>
<SSLCertificateKeyFile type="PEM"></SSLCertificateKeyFile>
<SSLPassPhrase></SSLPassPhrase>
<SSLCipherSuite></SSLCipherSuite>
<SSLSessionTimeout>5</SSLSessionTimeout>
</SSLServerCtx>
</SSL>
Place this section right after the end tag
root tag.
Locating the required SSL tags in the Server.xml file
The SSL-enabling tags in the Server.xml file occur in the following sequence:
<SSLEngine>
<SSLRandomSeed>
<SSLSessionCacheGC>
<SSLVerifyCertificate>
<SSLCACertificatePath>
<SSLCACertificateFile>
<SSLVerifyDepth>
<SSLCipherSuite>
but before the
</HTTPTunneling>
</Adaptor>
Configuring FCS for SSL
end
17
Need help?
Do you have a question about the BREEZE 5 - INSTALLING AND CONFIGURING EDGE SERVER and is the answer not in the manual?
Questions and answers