Release 10.1A: OpenEdge Getting Started:
Core Business Services


Configuring SSL server sessions

Table 7–1 describes the SSL session properties that you can set for an OpenEdge SSL server.

Table 7–1: OpenEdge server SSL session properties
Property
Default setting
Description
SSL connections enabled
No
Specifies if all connections to this server must use SSL.
Key alias name
"default_server"
Sets the alias name of the key store entry used by the SSL server to assert its identify to the SSL client attempting to connect to that server.
Key alias password
20333c34252a2137 (which is "password", encrypted)
Sets the password to use for accessing the authenticating key store entry. You must specify a password when you specify the key alias name.
The password must be encrypted unless you enter it in the Progress Explorer for the given server component, where OpenEdge encrypts the password automatically. Otherwise, you must specify the password as an encrypted value that you can obtain using the genpassword command-line tool located in the bin directory of your OpenEdge installation. For more information on this tool, see OpenEdge Getting Started: Installation and Configuration .
If you use the default key store entry, it also has a default password that you do not need to specify, unless you have changed it in a post installation update of the default server identity (see the "Managing your own SSL server identity" section).
Use a session cache
Yes
Specifies if the server provides a cache for SSL client sessions that might be resumed after the client disconnects from the SSL server.
Session time-out
180 seconds
Specifies, in seconds, the length of time that an SSL client session is held in the session cache, during which an SSL client can resume its session. If the client has not reused or resumed a session within the specified amount of time, the SSL session information is discarded and the SSL client must make a full SSL session connection in order to resume access to his server.

Table 7–2 describes the mechanisms for setting SSL session properties for OpenEdge SSL servers and indicates where you can find more information about them.

Table 7–2: Mechanisms for setting OpenEdge SSL server session properties
This SSL server
component...
Relies on this mechanism...
To set its SSL properties as described in...
OpenEdge RDBMS
Startup parameters.
AppServer
The Progress Explorer framework.
SonicMQ BrokerConnect
The Progress Explorer framework.
WebSpeed Transaction Server
The Progress Explorer framework.
Progress 4GL socket server
Connection parameters.

Other server platforms potentially involved with OpenEdge SSL clients, such as Web servers (or JSEs) and the Sonic ESB, provide their own means for configuring them to use SSL. For more information, see the platform-specific documentation.


Copyright © 2005 Progress Software Corporation
www.progress.com
Voice: (781) 280-4000
Fax: (781) 280-4095