Hp Nonstop Ssl Features; Support Of Ssl And Tls Protocol Standards; Fault-Tolerance; Ssl-Enabling For Hp Client Components Running On Microsoft Windows Systems - HP NonStop SSL Reference Manual

Run Mode
FTPC
FTPS
PROXYC
PROXYS
TELNETS
EXPANDS
ODBCMXS

HP NonStop SSL Features

Support of SSL and TLS Protocol Standards

HP NonStop SSL uses SSL (Secure Socket Layer) in the TLS (Transport Layer Security) variant as standardized by the
IETF in RFC 2246, to secure an application on the transport layer. SSL 2.0, SSL 3.0 and TLS 1.0 (SSL 3.1) are
supported. It offers multiple configurable cipher suites with RSA key exchange with public key lengths up to 8192 bit
(client authentication with max. 4096 bit RSA) and up to 256 bit AES for bulk encryption. Additionally Elliptic Curve
Cryptography (ECC) with various available curves is supported.

Fault-Tolerance

HP NonStop SSL proxies can be configured as persistent processes, enabling automatic recovery from failures, such as
CPU outages.
SSL-enabling for HP Client Components Running on Microsoft
Windows Systems
The RemoteProxy component included with HP NonStop SSL is used to enable SSL encryption for HP client
components running on Microsoft Windows systems. Usage of the RemoteProxy component is supported for selected
HP NonStop products only, including HP NonStop Remote Server Call (RSC/MP) and HP NonStop ODBC/MX.
Additionally, the RemoteProxy can act as an SSL enabling LPD server proxy in order to secure LPD printing off the HP
NonStop platform. Usage of the LPDS server mode is supported in combination with the Microsoft Windows platform
only. Further note that the HP NonStop SSL RemoteProxy does not support being installed as a Windows service.

IPv6 Support

With HP NonStop SSL AAE, IPv6 support was introduced for the run modes whose plain counterpart protocols do
support IPv6, in particular the PROXY and the FTP run modes. Please see section

Secure Proxy for Telnet Access

HP NonStop SSL can be run as a proxy process to front-end TCP/IP servers accepting plain TCP connections, such as
the NonStop TELSERV process, enabling secure communication to clients, which also support the SSL protocol. SSL
capable clients are, for example, comForte's MR-Win6530 and J6530, Crystal Point's OutsideView and Cail's CTT.
10 • Introduction
Usage
FTP client proxy
FTP server proxy
Generic SSL client proxy
Generic SSL server proxy
Secure Telnet proxy
Secure EXPAND proxy
Secure ODBC/MX proxy
"IPv6 considerations" for details.
HP NonStop SSL Reference Manual