uCosminexus Application Server, Security Management Guide

[Contents][Index][Back][Next]

7.3.5 Setup in an execution environment (for HTTPS communication)

To use the SSL/TLS communication functionality realized by SSL-J, you must configure the following:

Organization of this subsection
(1) Configuring the J2EE server
(2) Configuring the batch server
(3) Configuring batch applications
(4) Configuring Java applications

(1) Configuring the J2EE server

You can use this communication functionality to provide HTTPS communication with applications running on a J2EE server. To configure the J2EE server, use usrconf.properties (user property file for J2EE server) or the Easy Setup definition file.

The table below shows the parameters to be specified.

Table 7-6 Settings for the SSL/TLS communication functionality realized by SSL-J for HTTPS communication

Specified parameter Setting
https.protocols Specifies the protocol.
https.cipherSuites Specifies the encryption suites.

usrconf.properties (user property file for J2EE server) contains the default values for protocols and encryption suites. To use default settings that are commented out, delete the hash marks (#) added before the lines. If you want to limit the use of protocols and encryption suites, use this file only to offer necessary protocols and encryption suites.

Below are the default settings in the user property file.

Default settings in usrconf.properties (user property file for J2EE server)
# JDK SSL-J Settings
# If you want to enable SSL-J, please uncomment.
#https.protocols=SSLv3,TLSv1,TLSv1.1,TLSv1.2
#https.cipherSuites=TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384,TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,TLS_DHE_DSS_WITH_AES_256_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256,TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,TLS_DHE_DSS_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_RC4_128_SHA,TLS_ECDHE_RSA_WITH_RC4_128_SHA,SSL_RSA_WITH_RC4_128_SHA,TLS_ECDH_ECDSA_WITH_RC4_128_SHA,TLS_ECDH_RSA_WITH_RC4_128_SHA,TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_RSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,SSL_RSA_WITH_RC4_128_MD5

For details about usrconf.properties (user property file for J2EE server), see 2.4. usrconf.properties (user property file for J2EE server) in the uCosminexus Application Server Definition Reference Guide.

(2) Configuring the batch server

You can use this communication functionality to provide HTTPS communication with applications running on a batch server. To configure a batch server, use usrconf.properties (user property file for batch servers).

For details about usrconf.properties (user property file for batch servers), see 3.3 use usrconf.properties (user property file for batch servers) in the uCosminexus Application Server Definition Reference Guide.

(3) Configuring batch applications

To use the SSL/TLS communication functionality realized by SSL-J in batch applications, use usrconf.properties (user property file for batch applications). For details about usrconf.properties (user property file for batch applications), see 3.7 usrconf.properties (user property file for batch applications) in the uCosminexus Application Server Definition Reference Guide.

(4) Configuring Java applications

To use the SSL/TLS communication functionality realized by SSL-J in Java applications, use usrconf.properties (user property file for Java applications). For details about usrconf.properties (user property file for Java applications), see 14.3 usrconf.properties (user property file for Java applications) in the uCosminexus Application Server Definition Reference Guide.