Configuring Java CAPS Environment Components for Application Adapters

SSL

Details for the SSL settings used for SSL connections are detailed in the table.

Table 23 Environment Configuration — Security and SSL

Name 

Description 

Required Value 

Protocol SSL

The SSL protocol to use when establishing an SSL connection with the server. If the protocol is not set by this method, the default protocol type, TLS (Sun JSSE), is used.

If you are using the default Sun JSSE provider, choose one of the following settings: 

TLSv1

TLS

SSLv2

SSLv3

SSL

If you are running the Sun Application Server on AIX, choose one of the following settings: 

SSL-TLS

TLSv1

TLS

SSLv3

SSLv2

SSL

For details on these settings, see the appropriate JSSE documentation. 

JSSE Provider Class

Specifies the fully qualified name of the JSSE provider class. For more information, see the Sun Java Web site at:

http://java.sun.com

The name of a valid JSSE provider class. The default is 

com.sun.net.ssl.internal.ssl.Provider

If you are running the Sun Application Server on AIX, specify 

com.ibm.jsse.IBMJSSEProvider.

X509 Algorithm Name

Specifies the X509 algorithm name to use for the trust and key manager factories. 

The name of a valid X509 algorithm. The default is SunX509. If you are running the Sun Application Server on AIX, specify IbmX509.

Verify Hostname

See Verify hostname for further information.

 

KeyStore Type

Specifies the default KeyStore type. The keystore type is used for key/certificate management when establishing an SSL connection. If the default KeyStore type is not set by this method, the default KeyStore type, JKS, is used. 

 

KeyStore

Specifies the default KeyStore file. The keystore is used for key/certificate management when establishing SSL connections. 

A valid package location. 

There is no default value. 

KeyStore Username

The username for accessing the keystore used for key/certificate management when establishing SSL connections. 


Note –

If the keystore type is PKCS12 or JKS, the keystore username properties is not used. PKCS12 and JKS keystore types require passwords for access but do not require user names. If you enter a value for this property, it is ignored for PKCS12 and JKS.


 

KeyStore Password

Specifies the default KeyStore password. The password is used to access the KeyStore used for key/certificate management when establishing SSL connections. 

There is no default value. 

TrustStore Type

The TrustStore type of the TrustStore used for CA certificate management when establishing SSL connections. If the TrustStore type is not set by this method, the default TrustStore type, JKS, is used.

A valid TrustStore type.

TrustStore

Specifies the default TrustStore. The TrustStore is used for CA certificate management when establishing SSL connections. 

A valid TrustStore name.

There is no default value. 

TrustStore Password

Specifies the default TrustStore password. The password is for accessing the TrustStore used for CA certificate management when establishing SSL connections. 

A valid TrustStore password.

There is no default value.