Release 10.1A: OpenEdge Development:
Messaging and ESB

> ## Security considerations

> The OpenEdge implementation of Secure Sockets Layer (SSL) technology enables both BrokerConnect and the OpenEdge Adapter for Sonic ESB to support secure connections between the 4GL application and the component functioning as the server. In the case of BrokerConnect, the server component is the adapter itself; in the case of the OpenEdge Adapter for Sonic ESB, the server component is an AppServer.

> Note: For ClientConnect and ServerConnect, there is no connection to secure over the network.

> Security derives from the client authentication of the server’s identity via a Public Key Infrastructure (PKI), and a symmetric data encryption system. The security of the keys and digital certificates used by the PKI depends on trust in the certificate authorities (CAs) that issue them. OpenEdge provides default keys for applications that require only encryption/decryption of client/server communications without the need for full client/server authentication. OpenEdge provides tools for managing these keys and the digital certificates for exchanging them. For an overview of OpenEdge security concepts and instructions on the use of these tools, see OpenEdge Getting Started: Core Business Services .

Copyright © 2005 Progress Software Corporation www.progress.com Voice: (781) 280-4000 Fax: (781) 280-4095