Managing Ciphers

The following procedure shows how to manage ciphers in Siebel Application Interface for Siebel CRM.

To manage ciphers

  1. In the server.xml file (located in the ai\applicationcontainer\conf\ folder) for Siebel Application Interface, go to the following SSL/TLS Connector container attribute:

    <Connector
        port="xxxx"
        protocol="org.apache.coyote.http11.Http11NioProtocol"
        maxThreads="150"
        SSLEnabled="true"
        maxParameterCount="1000"
        scheme="https"
        secure="true"
        relaxedQueryChars="&#x20;&#x22;&#x3C;&#x3E;&#x5B;&#x5C;&#x5D;&#x5E;&#x60;&#x7B;&#x7C;&#x7D;"
        relaxedPathChars="&#x20;&#x22;&#x3C;&#x3E;&#x5B;&#x5C;&#x5D;&#x5E;&#x60;&#x7B;&#x7C;&#x7D;"
    >
        <SSLHostConfig
            truststoreFile="xxxx"
            truststorePassword="xxxx"
            truststoreType="JKS"
            protocols="TLSv1.2+TLSv1.3"
            ciphers="...."
            certificateVerification="none"
        >
            <Certificate
                certificateKeystoreFile="xxxx"
                certificateKeystorePassword="xxxx"
                certificateKeystoreType="JKS"
                certificateKeyAlias="xxxx"
            />
        </SSLHostConfig>
    </Connector>
  2. Add ciphers to this list (or remove ciphers from this list) as required.

  3. Restart the application container for Siebel Application Interface.

    For information on starting and stopping application containers, see Siebel System Administration Guide.