Configuring Java CAPS Environment Components for Communications Adapters

SSL

Details for the SSL settings used for SSL connections are detailed in the following table.

Table 63 Environment Configuration — Security, SSL

Name 

Description 

Required Value 

Protocol SSL

The SSL protocol to use when establishing an SSL connection with the server. If the protocol is not set by this method, the default protocol type, TLS (Sun JSSE), is used. If an SSL connection is not required, leave the default No SSL option. 

If you are using the default Sun JSSE provider, choose one of the following settings: 

  • TLSv1

  • TLS

  • SSLv2

  • SSLv3

  • SSL

If you are running the Sun Integration Server on AIX, choose or enter one of the following settings: 

  • SSL-TLS

  • TLSv1

  • TLS

  • SSLv3

  • SSLv2

  • SSL

For details on these settings, see the appropriate JSSE documentation.

JSSE Provider Class

Specifies the fully qualified name of the JSSE provider class. For more information, see the Sun Java Web site at:

http://java.sun.com.

It is assumed that the provider class is in the runtime classpath. 

The name of a valid JSSE provider class. The default is 

com.sun.net.ssl.internal.ssl.Provider

If you are running the Sun Integration Server on AIX, specify 

com.ibm.jsse.IBMJSSEProvider

X509 Algorithm Name

Specifies the X509 algorithm name to use for the trust and key manager factories. 

The name of a valid X509 algorithm. 

The default is SunX509. If you are running the Sun Integration Server on AIX, specify IbmX509.

KeyStore Type

Specifies the default KeyStore type. The keystore type is used for key/certificate management when establishing an SSL connection. If the default KeyStore type is not set by this method, the default KeyStore type, JKS, is used. 

 

KeyStore

Specifies the default KeyStore file. The keystore is used for key/certificate management when establishing SSL connections. 

A valid package location. There is no default value. It is recommended to use 


<c:\JavaCAPS>\appserver\is\
domains<MyDomain>\config\
keystore.jks

where, 

c:\JavaCAPS is the directory where the Sun Java Composite Application Platform Suite is installed and MyDomain is the name of your domain.

KeyStore Username

The username for accessing the keystore used for key/certificate management when establishing SSL connections. 


Note –

If the keystore type is PKCS12 or JKS, the keystore username properties is not used. PKCS12 and JKS keystore types require passwords for access but do not require user names. If you enter a value for this property, it is ignored for PKCS12 and JKS.


 

KeyStore Password

Specifies the default KeyStore password. The password is used to access the KeyStore used for key/certificate management when establishing SSL connections; there is no default. 

 

TrustStore Type

The TrustStore type of the TrustStore used for CA certificate management when establishing SSL connections. If the TrustStore type is not set by this method, the default TrustStore type, JKS, is used.

A valid TrustStore type.

TrustStore

Specifies the default TrustStore. The TrustStore is used for CA certificate management when establishing SSL connections. 

A valid TrustStore name. There is no default value. It is recommended to use


 <c:\JavaCAPS>\appserver\is
\domains<MyDomain>\config\
cacerts.jks

where, 

c:\JavaCAPSis the directory where the Sun Java Composite Application Platform Suite is installed and MyDomain is the name of your domain.

TrustStore Password

Specifies the default TrustStore password. The password is for accessing the TrustStore used for CA certificate management when establishing SSL connections. 

A valid TrustStore password. There is no default value.