All Downloads are FREE. Search and download functionalities are using the official Maven repository.

en.help.task-editiiopssl.html Maven / Gradle / Ivy

There is a newer version: 8.0.0-JDK17-M7
Show newest version


To Edit SSL Settings for a Secure IIOP Listener

  1. In the tree component, expand the Configuration node.

  2. Under the Configuration node, expand the ORB node.

  3. Select the IIOP Listeners node.

    The IIOP Listeners page opens.

  4. In the table, click the name of the listener to be edited.

    The Edit IIOP Listener page opens.

  5. If the Security Enabled checkbox is selected, click the SSL tabbed pane to modify the Secure Socket Layer settings of this IIOP listener.

    The SSL page opens.

  6. On the SSL page, select the SSL3 Enabled checkbox to enable SSL3.

    This option is enabled by default.

  7. Select the TLS Enabled checkbox to enable Transport Layer Security (TLS).

    This option is enabled by default.

  8. Select the Client Authentication Enabled checkbox to require clients to identify themselves to the server on every request.

    This option is disabled by default.

  9. In the Certificate Nickname field, type the nickname of the server certificate in the certificate database or the PKCS#11 token.

    In the certificate, the name format is tokenname:nickname. Including the tokenname: part of the name in this attribute is optional.

  10. In the Key Store field, type the name of the keystore file (for example, keystore.jks).

  11. In the Trust Algorithm field, type the name of the trust management algorithm (for example, PKIX) to use for certification path validation.

  12. In the Max Certificate Length field, type the maximum number of non-self-issued intermediate certificates that can exist in a certification path.

    This field is used only if the Trust Algorithm field is set to PKIX. A value of 0 implies that the path can only contain a single certificate. A value of -1 implies that the path length is unconstrained (there is no maximum). Setting a value less than -1 causes an exception to be thrown.

  13. In the Trust Store field, type the name of the truststore file (for example, cacerts.jks).

  14. In the Cipher Suites area, specify the cipher suites to be used.

    If you do not add any cipher suites, all cipher suites will be used.

  15. Click OK.

See Also
Copyright © 2005, 2017, Oracle and/or its affiliates. All rights reserved. Legal Notices




© 2015 - 2024 Weber Informatics LLC | Privacy Policy