Try OpenEdge Now
skip to main content
Core Business Services - Security and Auditing
Security : SSL in OpenEdge : Configuring and running SSL sessions : Configuring SSL server sessions
 
Configuring SSL server sessions
The following table describes the SSL session properties that you can set for an OpenEdge SSL server.
Table 1. OpenEdge server SSL session properties
Property
Default setting
Description
SSL connections enabled
No
Specifies if all connections to this server must use SSL.
Key alias name
"default_server"
Sets the alias name of the key store entry used by the SSL server to assert its identify to the SSL client attempting to connect to that server.
Key alias password
20333c34252a2137 (which is "password", encrypted)
Sets the password to use for accessing the authenticating key store entry. You must specify a password when you specify the key alias name. The password must be encrypted unless you enter it in OpenEdge Management or OpenEdge Explorer for the given server component, where OpenEdge encrypts the password automatically. Otherwise, you must specify the password as an encrypted value that you can obtain using the genpassword command-line tool located in the bin directory of your OpenEdge installation. For more information on this tool, see OpenEdge Getting Started: Installation and Configuration.If you use the default key store entry, it also has a default password that you do not need to specify, unless you have changed it in a post installation update of the default server identity (see Managing your own SSL server identity).
Use a session cache
Yes
Specifies if the server provides a cache for SSL client sessions that might be resumed after the client disconnects from the SSL server.
Session time-out
180 seconds
Specifies, in seconds, the length of time that an SSL client session is held in the session cache, during which an SSL client can resume its session. If the client has not reused or resumed a session within the specified amount of time, the SSL session information is discarded and the SSL client must make a full SSL session connection in order to resume access to his server.
The following table describes the mechanisms for setting SSL session properties for OpenEdge SSL servers and indicates where you can find more information about them.
Table 2. Mechanisms for setting OpenEdge SSL server session properites
This SSL server component . . .
Relies on this mechanism . . .
To set its SSL properties as described in . . .
OpenEdge RDBMS
Startup parameters
*OpenEdge Data Management: Database Administration
*OpenEdge Deployment: Startup Command and Parameter Reference
AppServer
The Unified Broker framework
*OpenEdge Application Server: Administration
*OpenEdge Management or OpenEdge Explorer online help
SonicMQ BrokerConnect
The Unified Broker framework
*OpenEdge Application Server: Administration
*OpenEdge Management or OpenEdge Explorer online help
WebSpeed Transaction Server
The Unified Broker framework
*OpenEdge Application Server: Administration
*OpenEdge Management or OpenEdge Explorer online help
ABL socket server
Connection parameters
*OpenEdge Development: Programming Interfaces
*OpenEdge Development: ABL Reference
Other server platforms potentially involved with OpenEdge SSL clients, such as Web servers (or JSEs) and the Sonic ESB, provide their own means for configuring them to use SSL. For more information, see the platform-specific documentation.