Release 10.1A: OpenEdge Getting Started:
Core Business Services

> ## Configuring SSL server sessions

> Table 7–1 describes the SSL session properties that you can set for an OpenEdge SSL server.

> Table 7–1: OpenEdge server SSL session properties
> Property | Default setting | Description
> --- | --- | ---
> SSL connections enabled | No | Specifies if all connections to this server must use SSL.
> Key alias name | `"default_server"` | Sets the alias name of the key store entry used by the SSL server to assert its identify to the SSL client attempting to connect to that server.
> Key alias password | `20333c34252a2137` (which is `"password"`, encrypted) | Sets the password to use for accessing the authenticating key store entry. You must specify a password when you specify the key alias name. The password must be encrypted unless you enter it in the Progress Explorer for the given server component, where OpenEdge encrypts the password automatically. Otherwise, you must specify the password as an encrypted value that you can obtain using the `genpassword` command-line tool located in the `bin` directory of your OpenEdge installation. For more information on this tool, see OpenEdge Getting Started: Installation and Configuration . If you use the default key store entry, it also has a default password that you do not need to specify, unless you have changed it in a post installation update of the default server identity (see the "Managing your own SSL server identity" section).
> Use a session cache | Yes | Specifies if the server provides a cache for SSL client sessions that might be resumed after the client disconnects from the SSL server.
> Session time-out | 180 seconds | Specifies, in seconds, the length of time that an SSL client session is held in the session cache, during which an SSL client can resume its session. If the client has not reused or resumed a session within the specified amount of time, the SSL session information is discarded and the SSL client must make a full SSL session connection in order to resume access to his server.

> Table 7–2 describes the mechanisms for setting SSL session properties for OpenEdge SSL servers and indicates where you can find more information about them.

> Table 7–2: Mechanisms for setting OpenEdge SSL server session properties
> This SSL server component... | Relies on this mechanism... | To set its SSL properties as described in...
> --- | --- | ---
> OpenEdge RDBMS | Startup parameters. | OpenEdge Data Management: Database Administration OpenEdge Deployment: Startup Command and Parameter Reference
> AppServer | The Progress Explorer framework. | OpenEdge Application Server: Administration Progress Explorer online help
> SonicMQ BrokerConnect | The Progress Explorer framework. | OpenEdge Application Server: Administration Progress Explorer online help
> WebSpeed Transaction Server | The Progress Explorer framework. | OpenEdge Application Server: Administration Progress Explorer online help
> Progress 4GL socket server | Connection parameters. | OpenEdge Development: Programming Interfaces OpenEdge Development: Progress 4GL Reference

> Other server platforms potentially involved with OpenEdge SSL clients, such as Web servers (or JSEs) and the Sonic ESB, provide their own means for configuring them to use SSL. For more information, see the platform-specific documentation.

Copyright © 2005 Progress Software Corporation www.progress.com Voice: (781) 280-4000 Fax: (781) 280-4095