ha

Controls the communications between the data replication layer.

client

Controls most RMI communication.

internal

Controls the SSL internal authentication mechanism.

transportType

This parameter should be set to SSL.

serverKeyAlias

The keystore alias that identifies the keypair used by the server end of a connection.

clientKeyAlias

The keystore alias that identifies the keypair used by the client end of a connection.

clientAuthRequired

Should always be true for ha and internal transports and should be false for client transports.

clientIdentityAllowed

When clientAuthRequired is true, this specifies what client identification check should be applied. This should be set to dnmatch(XXX) where XXX is the Distinguished name from the client certificate.

serverIdentityAllowed

This specifies what server verification should be performed. This should normally be set to dnmatch(XXX) where XXX is the Distinguished name from the server certificate.

allowCipherSuites

This is a comma-delimited list of SSL/TLS cipher suites that should be considered for use. For valid options, see the Java JSSE documentation corresponding to your JDK version. If not specified, the JDK default set of cipher suites is allowed.

allowProtocols

This is a comma-delimited list of SSL/TLS protocols that should be considered for use. For valid options, see the Java JSSE documentation corresponding to your JDK version. If not specified, the JDK default set of protocols is used.

clientAllowCipherSuites

See allowCipherSuites for a description of the format. This parameter sets the cipher suite requirements only for the initiating side of a connection. If set, it overrides any setting of allowCipherSuites for the connection initiator.

clientAllowProtocols

See allowProtocols for a description of the format. This parameter sets the protocol requirements only for the initiating side of a connection. If set, it overrides any setting of allowProtocols for the connection initiator.