uCosminexus Application Server, Security Management Guide
To use the SSL/TLS communication functionality realized by SSL-J, you must configure the following:
You can use this communication functionality to provide HTTPS communication with applications running on a J2EE server. To configure the J2EE server, use usrconf.properties (user property file for J2EE server) or the Easy Setup definition file.
The table below shows the parameters to be specified.
Table 7-6 Settings for the SSL/TLS communication functionality realized by SSL-J for HTTPS communication
| Specified parameter | Setting |
|---|---|
| https.protocols | Specifies the protocol. |
| https.cipherSuites | Specifies the encryption suites. |
usrconf.properties (user property file for J2EE server) contains the default values for protocols and encryption suites. To use default settings that are commented out, delete the hash marks (#) added before the lines. If you want to limit the use of protocols and encryption suites, use this file only to offer necessary protocols and encryption suites.
Below are the default settings in the user property file.
# JDK SSL-J Settings # If you want to enable SSL-J, please uncomment. #https.protocols=SSLv3,TLSv1,TLSv1.1,TLSv1.2 #https.cipherSuites=TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384,TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,TLS_DHE_DSS_WITH_AES_256_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256,TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,TLS_DHE_DSS_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_RC4_128_SHA,TLS_ECDHE_RSA_WITH_RC4_128_SHA,SSL_RSA_WITH_RC4_128_SHA,TLS_ECDH_ECDSA_WITH_RC4_128_SHA,TLS_ECDH_RSA_WITH_RC4_128_SHA,TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_RSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,SSL_RSA_WITH_RC4_128_MD5 |
For details about usrconf.properties (user property file for J2EE server), see 2.4. usrconf.properties (user property file for J2EE server) in the uCosminexus Application Server Definition Reference Guide.
You can use this communication functionality to provide HTTPS communication with applications running on a batch server. To configure a batch server, use usrconf.properties (user property file for batch servers).
For details about usrconf.properties (user property file for batch servers), see 3.3 use usrconf.properties (user property file for batch servers) in the uCosminexus Application Server Definition Reference Guide.
To use the SSL/TLS communication functionality realized by SSL-J in batch applications, use usrconf.properties (user property file for batch applications). For details about usrconf.properties (user property file for batch applications), see 3.7 usrconf.properties (user property file for batch applications) in the uCosminexus Application Server Definition Reference Guide.
To use the SSL/TLS communication functionality realized by SSL-J in Java applications, use usrconf.properties (user property file for Java applications). For details about usrconf.properties (user property file for Java applications), see 14.3 usrconf.properties (user property file for Java applications) in the uCosminexus Application Server Definition Reference Guide.
All Rights Reserved. Copyright (C) 2013, Hitachi, Ltd