Page History

As it was already mentioned, there are two options how to configure SSL connection using FILE or exporting from STORE. These otpions are defined in the SSLCertificateSource parameter. Depending on your preferences, you need to select one of the options. The default value is STORE.

<!-- The source of an SSL certificate. Possible values: FILE, STORE. The default value is STORE. -->
<SSLCertificateSource>STORE</SSLCertificateSource>

Let’s review these two options and the steps required to configure them.

Option A. Configuring SSL connection using FILE.

1. Change SSLCertificateSource value from STORE to FILE:

<SSLCertificateSource>FILE</SSLCertificateSource>

2. Specify the path to  *.pfx file containing the certificate and corresponding private key, for example, C:/Program Files/WebSpellChecker/AppServer/certificate.pfx in the tag below:

<SSLCertificateFile></SSLCertificateFile>

3. If your SSL certificate is password-protected, type the certificate password in the SSLCertificatePassword tag.

<SSLCertificatePassword>your_certificate_password</SSLCertificatePassword>

Option B. Configuring SSL connection by exporting SSL certificate from Windows Certificate Store.

Specify SSLCertificateStoreSettings parameters which is the group of parameters required to use SSL certificate from STORE, namely:

• SSLCertificateCommonName which is a server name protected by the SSL certificate fully qualified HostName; a string value, for example, cloud.kp.org;
• SSLCertificateUseMachineStore which is an option specifying if the machine store certificate is used.

Unlike Windows, on Linux-based environments there is only option available for SSL connection configuration, namely, FILE.

To configure SSL connection on Linux:

1. Specify the path to certificate file *.pem format, for example,  /opt/WSC/AppServer/cert.pem in the SSLCertificateFile tag below: 

<SSLCertificateFile></SSLCertificateFile>

2. Specify the path to private key file in *.pem format, for example, /opt/WSC/AppServer/key.pem in the tag below:

<SSLCertificateKeyFile></SSLCertificateKeyFile>

3. If your SSL certificate is password-protected, type the certificate password in the SSLCertificatePassword tag.