Copyright © TIBCO Software Inc. All Rights Reserved
Copyright © TIBCO Software Inc. All Rights Reserved


Chapter 32 RMS and RMS Projects Configuration : Enabling SSL Authentication in RMS

Enabling SSL Authentication in RMS
The SSL authentication process uses certificates that are issued by a certificate authority. The same process applies if the certificates are issued by an certificate generation utility or if self-signed certificates are used.
To establish a SSL connection an application acting as an SSL client contacts an application acting as an SSL server. There are two ways in which SSL authentication can be made:
Enabling One-way SSL Authentication in RMS
One-way SSL authentication enables the application operating as the SSL client, which in this case is web browser, to verify the identity of the application operating as the SSL server (RMS). The SSL-client application is not verified by the SSL-server application.
Procedure
1.
2.
In the CDD editor Processing Units tab, click default. In the Properties panel on the right, you can see the be.channel.deactivate property.
3.
4.
Save the RMS.cdd file
5.
In the file system, copy the RMS.cdd file from your workspace to the BRMS project and to the RMS server startup location:
   BE_HOME/rms/project/BRMS/Deployment/RMS.cdd
   BE_HOME/rms/bin/RMS.cdd
6.
To verify, type the URL "http://localhost/WebStudio/" in a web browser and press Enter. No port is required as default SSL port is used. The web browser notifies you about the untrusted certificate from the SSL server.
Enabling Two-way SSL Authentication in RMS
In two-way SSL authentication, the SSL client application, which in this case is a web browser, verifies the identity of the SSL server application (RMS), and then the SSL server application verifies the identity of the SSL-client application.
Procedure
1.
Follow the steps mentioned in the Enabling One-way SSL Authentication in RMS to enable the SSL server verification, but do not restart RMS server yet.
2.
In Studio Explorer, double click BRMS > WebStudio > Core > Transports > WS_TR_Secure_WebstudioHTTPConnection.sharedhttp to open it in the resource editor.
3.
In the resource editor, click Configure SSL. The SSL Configuration for HTTPS Connections window is displayed.
4.
In the SSL Configuration for HTTPS Connections window, select the Requires Client Authentication checkbox and click OK.
5.
6.
7.
Open your web browser and import the WSClientStore.p12 certificate file in the web browser from the location [BE_HOME]/rms/config/security/. Refer to your web browser’s help on how to import certificate in it.
To verify, type the URL "http://localhost/WebStudio/" in the same web browser and press Enter. No port is required as default SSL port is used. The web browser displays a confirmation window to select your SSL client certificate and send it to the SSL server. After that the web browser notifies you about the untrusted certificate from the SSL server.
 

Copyright © TIBCO Software Inc. All Rights Reserved
Copyright © TIBCO Software Inc. All Rights Reserved