SSL

This section discusses the how the connector implements an SSL capability. For background information, see your SSL documentation. This section assumes a familiarity with SSL technology.

JSSE

The connector can expose collaborations as SOAP/HTTPS web services and enable collaborations to invoke SOAP/HTTPS web services. The connector uses JSSE to provide support for HTTPS and SSL. IBM JSSE is shipped with the connector. To enable this capability, make sure you have the following entry in the java.security file that is among the files installed with the connector:

security.provider.5=com.ibm.jsse.IBMJSSEProvider

Note that java.security is located in the $ProductDir\lib\security directory of your connector installation. The connector uses the value of the JavaProtocolHandlerPackages connector property to set the system property java.protocol.handler.pkgs. Note that for the IBM JSSE that is shipped with the connector, the value of this property should be set to com.ibm.net.ssl.internal.www.protocol. The JavaProtocolHandlerPackages configuration property defaults to this value. However, if your system has a java.protocol.handler.pkgs system property with a non-empty value, the connector would overwrite it only if the JavaProtocolHandlerPackages connector property is also set.

During initialization, the connector disables all anonymous cipher suites supported by JSSE.

KeyStore and TrustStore

To use SSL with the connector, you must set up keystores and truststores. No tool is provided to set up keystores, certificates, and key generation. You must use third party software tools to complete these tasks.

SSL Properties

You can specify the following SSL connector-specific properties:

Note that these properties apply to a connector instance. The same set of SSL property values are used by all of the SOAP/HTTPS protocol listeners plugged into the connector and by the SOAP/HTTP-HTTPS protocol handler for each connector instance. For further information on HTTPS/SSL setup, see Appendix E, Configuring HTTPS/SSL.

Exposing collaborations as SOAP/HTTPS web services

When you expose collaborations as SOAP/HTTPS web services, you use the SOAP/HTTPS protocol listener. To use the SOAP/HTTPS protocol listener, you must specify SSL connector-specific properties. The values you assign to these properties should reflect your SSL requirements:

For further information on HTTPS/SSL setup, see Appendix E, Configuring HTTPS/SSL.

Collaborations invoking SOAP/HTTPS web services

To enable collaborations to invoke SOAP/HTTPS web services, you use the SOAP/HTTP-HTTPS protocol handler. If you are using SSL with the SOAP/HTTP-HTTPS protocol handler, you must specify SSL connector-specific properties. The values you assign to these properties should reflect the HTTPS/SSL requirements of your web services provider:

For further information on HTTPS/SSL setup, see Appendix E, Configuring HTTPS/SSL.

Copyright IBM Corp. 1997, 2004