Copyright © TIBCO Software Inc. All Rights Reserved

> SSL Support in TIBCO Enterprise Message Service
> TIBCO Enterprise Message Service supports the Secure Sockets Layer (SSL) protocol. SSL uses public and private keys to encrypt data over a network connection to secure communication between pairs of components:

> • | between an EMS client and the tibemsd server

> • | between the tibemsadmin tool and the tibemsd server

> • | between two routed servers

> • | between two fault-tolerant servers

> SSL provides secure communication that works with other mechanisms for authentication available in the EMS server. When authorization is enabled in the server, the connection undergoes a two-phase authentication process. First, an SSL hand-shake between client and server initializes a secure connection. Second, the EMS server checks the credentials of the client using the supplied username and password. If the connecting client does not supply a valid username and password combination, the connection fails, even if the SSL handshake succeeded.

> | When authorization is enabled, usernames and passwords are always checked, even on SSL secured connections.

> Implementations
> The TIBCO Enterprise Message Service server and the C client libraries use OpenSSL for SSL support. For more information, see www.openssl.org.
> EMS Java clients can use either JSSE (from Sun JavaSoft) or the SSL implementation from Entrust. The EMS Java installation includes JSSE; if you prefer to use Entrust, you must purchase and install the Entrust SSL implementation separately.
> EM S .NET 2.0 clients use the Microsoft implementation of SSL. The Microsoft implementation of SSL is compatible with OpenSSL. Certificates required by the client can either be stored in files or the Microsoft certificate store. However, Microsoft requires that the root certificate be installed in the Microsoft Certificate Store, even when certificate files are in use.
> EMS distributions usually build and include the latest versions of OpenSSL and OpenLDAP publicly available at the time of release. For exact version numbers see the Third Party Software License AgreementsTIBCO Software Inc. End User License Agreement for TIBCO Enterprise Message Service.

Copyright © TIBCO Software Inc. All Rights Reserved