Prerequisites for Mutual SSL Setup

  • Apache HTTP server with mod_ssl module. Refer to the TIBCO API Exchange Gateway readme for the Apache server version information. Verify that you have set it up as specified in Installing Apache HTTP Server.
  • RSA private key in PEM format to be used by the Apache HTTP server.
  • Digital certificate in PEM format that identifies the Apache HTTP server and includes the public key that corresponds to the Apache HTTP server’s private key.
  • Digital certificate chain in PEM format for each certificate authority that is trusted by the Apache HTTP server. This certificate chain is used to verify the digital certificates presented by the clients as part of the authentication step.
  • The issuer distinguished name and subject distinguished name (or optionally the certificate’s serial number) of each certificate that clients use to identify themselves to the Apache HTTP server.