You can configure Secure Socket Layer (SSL) connections between the DIH and other servers. You can configure SSL connections in a combination of different configuration sections:
[Server]. Configure SSL in this section for connections for incoming ACI calls. You can configure this section in either the IDOL configuration file or the DIH configuration file, depending on whether the system uses a unified or stand-alone setup.
Note: In a unified IDOL setup, you must set the SSLConfig configuration parameter in the [Server] section, rather than the [DistributionSettings] section.
[IDOLServerN] or [DIHEngineN]. Configure SSL in this section for connections for outgoing ACI calls. You can set this option in either the IDOL configuration file or DIH configuration file, depending on whether the system uses a unified or stand-alone setup.
You can also configure SSL connections between DIH and the service port of the child servers by using the ServiceSSLConfig parameter in this section.
[IndexServer]. Configure SSL in this section for connections for the index port.[Server], [IDOLServerN], or [DIHEngineN] section, or create an [IndexServer] section.Add the SSLConfig setting to specify the section in which you set the SSL details for the connection, usually SSLOptionN. For example:
[Server] (other server settings...) SSLConfig=SSLOption0 [IDOLServer0] SSLConfig=SSLOption0 [IDOLServer1] SSLConfig=SSLOption1
In this example, incoming ACI calls and outgoing calls to IDOLServer0 share the same SSL configuration, and outgoing calls to IDOLServer1 use a different configuration.
[IDOLServerN] section or the [DIHEngineN] section, add the ServiceSSLConfig setting to the name of the section in which you set the SSL details for connections to the child server service port.Create an [SSLOptionN] section for each unique SSLConfig or ServiceSSLConfig setting. Each SSLOption entry must contain the SSLMethod, SSLCertificate, and SSLPrivateKey parameters. For example:
[SSLOption0] SSLMethod=SSLV23 SSLCertificate=host1.crt SSLPrivateKey=host1.key [SSLOption1] SSLMethod=SSLV23 SSLCertificate=host2.crt SSLPrivateKey=host2.key
|
|