User guide

Chapter 10: How to Use SSL with the CORBA Service
10-4
Constructing SSL Linkage Environment
To perform encryption communication using SSL, the following processing must be done for the server
and client: creating the certification management environment and registering the certificates.
To perform SSL communication during CORBA application operation, it is necessary to register the SSL
environment in the CORBA Service and to set the SSL information for the CORBA application (server
application) that performs SSL communication.
Acquiring and Registering Certificates (for both the Server and
Client)
Create a private key/certificate management environment as an SSL environment, then register the CA
certificate obtained from the certification authority and site certificate in the Interstage certificate
environment. The same issuing office certificate must be registered for all servers and clients in which
CORBA applications for SSL linkage were placed.
For an explanation of obtaining and registering certificates, refer to Chapter 7, Setting and Use of the
Interstage Certificate Environment and Chapter 8, Setting and Use of the Certificate/Key Management
Environment Using the SMEE Command.
Setting and Registering the SSL Environment with the CORBA
Service (for both the Server and Client)
To use an Interstage certificate environment, set an SSL environment in a CORBA service using the
Interstage management console.
To use a certificate/key management environment configured with the SMEE commands, first register
an obtained certificate in the CORBA service using the odsetSSL command. Then, set the SSL linkage
parameters in the operating environment file for the CORBA service (config) and incorporate SSL
communication processing into the CORBA service.
Setting the SSL Information in the CORBA Application (Server
Application Only)
To perform the SSL linkage using the CORBA application, the SSL information must be set in the object
reference of the server application. To set the SSL information in the object reference, use the following
method:
• Set the SSL information in the object reference at static generation of the object reference by the
OD_or_adm command. (-s option)
• Specify the SSL information setting rule for the object reference generation during registration of
the server application by the OD_impl_inst command. (ssl parameter)
The SSL information is set according to this rule during object reference generation (both static and
dynamic generations).