Previous Next        Current Page: NeXtMidas User's Guide / Security and Secure Communication / Secure Communication Using TLS and PKI
back

Secure Communication Using TLS and PKI

The SSLCONFIGURE command and the SSLUtilities library code support TLS 1.2 communication

  • Types of communication supported:
    • 2-Way TLS 1.2
    • 1-Way TLS 1.2
    • Various options on trusing host certificate
  • Types of PKI certificates supported:
    • P12 & PFX
    • PEM
      • Multiple certifcate chains in the same PEM file are strongly discouraged
      • See SSLUtilities API for more information on how PEM files with multiple certificate chains are handled
    • JKS
  • Means of loading certificate:
    • Auto discovery
      • NSS
        • Specify 'SSLUtilities.nssEnabled = true' in SSLUtilities.properties file
        • If your in use Firefox profile is not the default, also add 'SSLUtilities.nssProfileName = '
        • IMPORTANT: Java also requires at least an empty secmod.db (legacy db) in your in use profile folder
      • CAPI
    • SSLUtitilities.properties file information
    • SSLCONFIGURE command line

See sslconfigure.exp or SSLUtilities.html for more information
back