Sun Java System Instant Messaging 7 2006Q1 Administration Guide

ProcedureTo Activate SSL Between Servers

Steps
  1. Set these iim.conf parameters:

    • iim_server.usesslport=true

    • iim_server.sslport=5223

    These parameters should already be in the iim.conf file.

    See iim.conf File Syntax for instructions on locating and modifying iim.conf.

  2. Set the server-to-server configuration as described in Chapter 6, Federating Deployment of Multiple Instant Messaging Servers.

  3. Add the following additional parameter to iim.conf:

    iim_server.coserver1.usessl=true

  4. Change the port number of the following parameter:

    iim_server.coserver1.host=hostname:5223

    The port number should be the SSL port of the other server.

  5. Refresh the server configuration using imadmin.


    imadmin refresh server
    

Example 10–2 SSL Server Configuration in iim.conf

Following is a section of iim.conf file with the required SSL configuration:


! Server to server communication port.
iim_server.port = "5269”
! Should the server listen on the server to server
! communication port
iim_server.useport = "True”
! Should this server listen for server-to-server communication
! using ssl port
iim_server.usesslport = "True”
iim_server.sslport=5223
iim_server.coservers=coserver1
iim_server.coserver1.serverid=Iamcompany22
iim_server.coserver1.password=secretforcompany22
iim_server.coserver1.usessl=true
iim_server.coserver1.host=iim.i-zed.com:5223
iim_server.serverid=Iami-zed
iim_server.password=secret4i-zed
iim_server.secconfigdir = "/etc/opt/SUNWiim/default/config"
iim_server.keydbprefix = "This-Database"
iim_server.certdbprefix = "Secret-stuff"
iim_server.secmodfile = "secmod.db"
iim_server.certnickname = "Server_Cert"
iim_server.keystorepasswordfile = "sslpassword.conf"