Configuring SSL for grid HTTP clients
Note: The SSLv3 protocol is disabled by default for SSL socket connections, because of general security weaknesses in the protocol.
- Access the Configuration Manager and click the Communication link followed by the Routers link.
- Select the router you wish to configure.
- Click Edit.
- In the HTTPS area, specify a port number (if not already present). HTTPS connections are now possible to that port.
- To configure the HTTPS authentication type, use the drop-down box. Note that if "Server authentication only" is chosen, client authentication via certificate to this HTTPS port will not be available. For more information, see Authenticating with a Grid Client Certificate.
- To enable specific cipher suites for the HTTPS connection, click Set Ciphers.... Use the Cipher Selection dialog box to specify the desired ciphers. The format of the cipher suites are those specified in the Java Cryptography Architecture Standard Algorithm Name Documentation, for example TLS_RSA_ WITH_AES_128_CBC_SHA. The dialog box allows inclusion and exclusion of each of the components of the cipher suites.
- Select the desired WWW authentication methods.
- Click Apply.
- Save the configuration.