User Guide
Configuring FCS for SSL 17
HTTP tunneling
For SSL to work properly, HTTP tunneling must be enabled. Clients use HTTP tunneling to
connect to the server via SSL.
Adding the required SSL tags in the Adaptor.xml file
All SSL tags in the Server.xml file are included by default. Not all of the required SSL tags in
Adaptor.xml are present by default, however.
You need to insert the following SSL-specific tags in the Adaptor.xml file.
<SSL>
<SSLServerCtx>
<SSLCertificateFile></SSLCertificateFile>
<SSLCertificateKeyFile type="PEM"></SSLCertificateKeyFile>
<SSLPassPhrase></SSLPassPhrase>
<SSLCipherSuite></SSLCipherSuite>
<SSLSessionTimeout>5</SSLSessionTimeout>
</SSLServerCtx>
</SSL>
Place this section right after the end tag </HTTPTunneling> but before the </Adaptor> end
root tag.
Locating the required SSL tags in the Server.xml file
The SSL-enabling tags in the Server.xml file occur in the following sequence:
■ <SSLEngine>
■ <SSLRandomSeed>
■ <SSLSessionCacheGC>
■ <SSLVerifyCertificate>
■ <SSLCACertificatePath>
■ <SSLCACertificateFile>
■ <SSLVerifyDepth>
■ <SSLCipherSuite>
NOTE
HTTP tunneling is enabled by default. No user action is required.