Disabling the Default Trust Behavior of the Web Proxy Server 4.0.x Agent

This section applies only if OpenSSO Enterprise is using SSL. By default the Web Proxy Server 4.0.x agent does not perform certificate checking, because the following property in the agent's OpenSSOAgentBootstrap.properties configuration file is set to true:

com.sun.identity.agents.config.trust.server.certs = true

The agent trusts any server certificate sent over SSL by the OpenSSO Enterprise host. If you want the agent to perform certificate checking, follow this task.

To Disable the Default Trust Behavior of the Web Proxy Server 4.0.x Agent

1. Find the agent's OpenSSOAgentBootstrap.properties file. For example:

   /opt/web_agents/proxy40_agent/Agent_001/config/OpenSSOAgentBootstrap.properties

2. In the OpenSSOAgentBootstrap.properties file, set the following property to false:

   com.sun.identity.agents.config.trust.server.certs = false

3. In the OpenSSOAgentBootstrap.properties file, set the following SSL properties, depending on your specific deployment:

   • com.sun.identity.agents.config.sslcert.dir is the directory containing the certificate database.

   • com.sun.identity.agents.config.certdb.prefix is the certificate database prefix, if you have multiple certificate databases in the same directory.

   • com.sun.identity.agents.config.certdb.password is the certificate database password.

   • com.sun.identity.agents.config.certificate.alias is the alias.

4. Restart the Web Proxy Server 4.0.x instance.