Secure Communication Using TLS and PKI

The SSLCONFIGURE command and the SSLUtilities library code support TLS 1.2 communication

• Types of communication supported:
  • 2-Way TLS 1.2
  • 1-Way TLS 1.2
  • Various options on trusing host certificate
• Types of PKI certificates supported:
  • P12 & PFX
  • PEM
  • Multiple certifcate chains in the same PEM file are strongly discouraged
  • See SSLUtilities API for more information on how PEM files with multiple certificate chains are handled
  • JKS
• Means of loading certificate:
  • Auto discovery
  • NSS
  • Specify 'SSLUtilities.nssEnabled = true' in SSLUtilities.properties file
  • If your in use Firefox profile is not the default, also add 'SSLUtilities.nssProfileName = '
  • IMPORTANT: Java also requires at least an empty secmod.db (legacy db) in your in use profile folder
  • CAPI
  • SSLUtitilities.properties file information
  • SSLCONFIGURE command line

See sslconfigure.exp or SSLUtilities.html for more information