en.help.task-editiiopssl.html Maven / Gradle / Ivy
Show all versions of console-corba-plugin Show documentation
To Edit SSL Settings for a Secure IIOP Listener
-
In the tree component, expand the Configuration node.
-
Under the Configuration node, expand the ORB node.
-
Select the IIOP Listeners node.
The IIOP Listeners page opens.
-
In the table, click the name of the listener to be edited.
The Edit IIOP Listener page opens.
-
If the Security Enabled checkbox is selected, click the SSL tabbed pane to modify the Secure Socket Layer settings of this IIOP listener.
The SSL page opens.
-
On the SSL page, select the SSL3 Enabled checkbox to enable SSL3.
This option is enabled by default.
-
Select the TLS Enabled checkbox to enable Transport Layer Security (TLS).
This option is enabled by default.
-
Select the Client Authentication Enabled checkbox to require clients to identify themselves to the server on every request.
This option is disabled by default.
-
In the Certificate Nickname field, type the nickname of the server certificate in the certificate database or the PKCS#11 token.
In the certificate, the name format is tokenname:
nickname. Including the tokenname:
part of the name in this attribute is optional.
-
In the Key Store field, type the name of the keystore file (for example, keystore.jks
).
-
In the Trust Algorithm field, type the name of the trust management algorithm (for example, PKIX) to use for certification path validation.
-
In the Max Certificate Length field, type the maximum number of non-self-issued intermediate certificates that can exist in a certification path.
This field is used only if the Trust Algorithm field is set to PKIX. A value of 0 implies that the path can only contain a single certificate. A value of -1 implies that the path length is unconstrained (there is no maximum). Setting a value less than -1 causes an exception to be thrown.
-
In the Trust Store field, type the name of the truststore file (for example, cacerts.jks
).
-
In the Cipher Suites area, specify the cipher suites to be used.
If you do not add any cipher suites, all cipher suites will be used.
-
Click OK.
See Also
Copyright © 2005, 2017, Oracle and/or its affiliates. All rights reserved. Legal Notices