SSL Server Provider
An SSL Server Provider resource template maintains the credentials required by an SSL server.
| Field | Required? | Editable? | Accepts SVars? | Description |
|---|---|---|---|---|
| Keystore Provider Having Identity | Y | Y | Y | Name of the Keystore Provider resource that maintains a keystore used to assert an identity. |
| Enable Access to Credential Store containing Identity | N | N | N |
Enables access to an identity keystore. To establish SSL connections, certain third-party systems, such as MySQL, require access to a keystore file location. In such situations Administrator provides a copy of credentials in a keystore, which are then written to disk and used by the third party as the SSL credential store. To prevent Administrator from providing credentials, uncheck the checkbox. Default: Checked |
| Key Alias to Access Identity | Y | Y | Y | Name of the alias used to access the identity. Default: None |
| Key Alias Password | Y | Y | N |
Password for the alias. Note: If you try to update the existing encrypted password then the existing password will be removed. You can add a new password. |
| Enable Mutual Authentication | N | Y | N | Indicates whether mutual authentication is enabled. When selected, the Make Client Authentication As, Keystore Provider as Trust Store, and Enable Access to Trust Store fields are displayed. Default: Unchecked |
| Make Client Authentication As | N | Y | N | Indicates whether it is optional or required for an SSL client to authenticate to the SSL server. Default: Optional |
| Keystore Provider as Trust Store | Y | Y | Y | The name of the Keystore Provider resource that maintains a keystore that confirms an identity. |
| Enable Access to Trust Store | N | N | N | Enables access to a trust credential store. To establish SSL connections, certain third-party systems, such as MySQL, require access to a keystore file location. In such situations, the Administrator provides a copy of the credentials in a keystore which are written to disk and used by the third party as the SSL credential store. Default: Checked |
| Maximum Pool Size | N | Y | Y | Specifies the maximum number of connections in the connection pool. Default: 20 |
| Field | Required? | Editable? | Accepts SVars? | Description |
|---|---|---|---|---|
| SSL Security Provider | N | Y | Y | The SSL security provider. |
| SSL Protocol | N | Y | N |
The SSL protocol to use in the SSL connection:
Default: TLSv1.2 |
| SSL Cipher Class | N | Y | N |
The number of bits in the key used to encrypt data:
The greater the number of bits in the key (cipher strength), the more possible key combinations and the longer it takes to break the encryption. Default: At Least 128 Bit |
| Explicit Cipher List | N | Y | Y | A list of ciphers. Enabled when SSL Cipher Class is set to Explicit Ciphers. Use the JSSE format for ciphers names. Default: None |
| Verify Remote Hostname | N | N | N |
Indicates whether the name on the server's certificate must be verified against the server's hostname. If the server's hostname is different than the name on the certificate, the SSL connection fails. The name on the certificate can be verified against another name by specifying Expected Remote Hostname. When checked, the Expected Remote Hostname field is enabled. Default: Unchecked |
| Expected Remote Hostname | N | Y | Y | (Optional) The expected name of the remote host. Default: None |