Administration Console Online Help

Previous Next Open TOC in new window
Content starts here

Jolt Connection Pools: Configuration: SSL

Configuration Options     

Use this page to configure SSL for this connection pool.

Configuration Options

Name Description
Key Pass Phrase

The encrypted identity passphrase.

When you get the value of this attribute, WebLogic Server does the following:

  1. Retrieves the value of the KeyPassPhraseEncrypted attribute.

  2. Decrypts the value and returns the unencrypted password as a String.

When you set the value of this attribute, WebLogic Server does the following:

  1. Encrypts the value.

  2. Sets the value of the KeyPassPhraseEncrypted attribute to the encrypted value.

Using this attribute (KeyPassPhrase) is a potential security risk because the String object (which contains the unencrypted password) remains in the JVM's memory until garbage collection removes it and the memory is reallocated. Depending on how memory is allocated in the JVM, a significant amount of time could pass before this unencrypted data is removed from memory.

Instead of using this attribute, use KeyPassPhraseEncrypted.

MBean Attribute:
JoltConnectionPoolMBean.KeyPassPhrase

Changes take effect after you redeploy the module or restart the server.

Key Store Name

The path and file name of the keystore containing the private key used in SSL mutual authentication.

MBean Attribute:
JoltConnectionPoolMBean.KeyStoreName

Changes take effect after you redeploy the module or restart the server.

Key Store Pass Phrase

The encrypted identity keystore's passphrase. If empty or null, then the keystore will be opened without a passphrase.

When you get the value of this attribute, WebLogic Server does the following:

  1. Retrieves the value of the KeyStorePassPhraseEncrypted attribute.

  2. Decrypts the value and returns the unencrypted password as a String.

When you set the value of this attribute, WebLogic Server does the following:

  1. Encrypts the value.

  2. Sets the value of the KeyStorePassPhraseEncrypted attribute to the encrypted value.

Using this attribute (KeyStorePassPhrase) is a potential security risk because the String object (which contains the unencrypted password) remains in the JVM's memory until garbage collection removes it and the memory is reallocated. Depending on how memory is allocated in the JVM, a significant amount of time could pass before this unencrypted data is removed from memory.

Instead of using this attribute, use KeyStorePassPhraseEncrypted.

MBean Attribute:
JoltConnectionPoolMBean.KeyStorePassPhrase

Changes take effect after you redeploy the module or restart the server.

Trust Store Name

The path and file name of the keystore containing the trust certificates.

MBean Attribute:
JoltConnectionPoolMBean.TrustStoreName

Changes take effect after you redeploy the module or restart the server.

Trust Store Pass Phrase

The encrypted trust keystore's passphrase. If empty or null, then the keystore will be opened without a passphrase.

When you get the value of this attribute, WebLogic Server does the following:

  1. Retrieves the value of the TrustStorePassPhraseEncrypted attribute.

  2. Decrypts the value and returns the unencrypted password as a String.

When you set the value of this attribute, WebLogic Server does the following:

  1. Encrypts the value.

  2. Sets the value of the TrustStorePassPhraseEncrypted attribute to the encrypted value.

Using this attribute (TrustStorePassPhrase) is a potential security risk because the String object (which contains the unencrypted password) remains in the JVM's memory until garbage collection removes it and the memory is reallocated. Depending on how memory is allocated in the JVM, a significant amount of time could pass before this unencrypted data is removed from memory.

Instead of using this attribute, use TrustStorePassPhraseEncrypted.

MBean Attribute:
JoltConnectionPoolMBean.TrustStorePassPhrase

Changes take effect after you redeploy the module or restart the server.


Back to Top