Optionally Configure SSL

[Bruce Maginnis]

Hi,
Is there any way to configure SSL on/off simply?

I know you can specify a server-socket-factory like below.

But I can't seem to find a default factory to use when not using SSL.

What are the best practices to configure SSL on/off?

Thanks

<qserver logger="Q2" name="JPOS-Server">
<attr name="port" type="java.lang.Integer">${jpos.port:5113}</attr>
<server-socket-factory class="${jpos.socket-factory:org.jpos.iso.GenericSSLSocketFactory}" />
<channel name="qserver-channel"
logger="Q2"
class="${jpos.channel:org.jpos.iso.channel.BASE24Channel}"
packager="${jpos.packager:org.jpos.iso.packager.BASE24Packager}">
<property name="timeout" value="10000"/>

</channel>
<request-listener class="org.jpos.iso.IncomingListener" logger="Q2"
realm="incoming-request-listener">
<property name="space" value="transient:default" />
<property name="queue" value="TransactionQueue" />
<property name="timeout" value="35000" />
<property name="spaceTimeout" value="35000" />
</request-listener>
</qserver>

[Bruce Maginnis]

Hi,

Trying to figure out how to optionally configure SSL on or not.
I was going to use below but there doesn't appear to be a default SocketFactory to configure when I don't want to use SSL.

What is the easiest way to optionally configure SSL for JPOS?

Different channel-adapters?

Thanks in advance

<server-socket-factory class="${jpos.socket-factory:org.jpos.iso.GenericSSLSocketFactory}" />

in

[Alejandro Revilla]

No factory at all will disable SSL.

--

@apr

--
--
jPOS is licensed under AGPL - free for community usage for your open-source project. Licenses are also available for commercial usage. Please support jPOS, contact: sa...@jpos.org
---
You received this message because you are subscribed to the Google Groups "jPOS Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jpos-users+...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/jpos-users/eb97b5f2-508f-4114-8927-8816d2a6c47en%40googlegroups.com.

[Chandrasekhar Rout]

You can configure SSL by using
Keystore , keystore password and truststore and truststore password.

<qserver logger="Q2" name="JPOS-Server">
    <attr name="port" type="java.lang.Integer">${jpos.port:5113}</attr>
    <server-socket-factory class="${jpos.socket-factory:org.jpos.iso.GenericSSLSocketFactory}">

        <!-- Specify keystore and truststore properties -->
        <property name="keystore" value="/path/to/keystore.jks" />
        <property name="keystore-password" value="keystore-password" />
        <property name="key-password" value="key-password" />
        <property name="truststore" value="/path/to/truststore.jks" />
        <property name="truststore-password" value="truststore-password" />
        <property name="protocol" value="TLS" />
    </server-socket-factory>

    <channel name="qserver-channel"
        logger="Q2"
        class="${jpos.channel:org.jpos.iso.channel.BASE24Channel}"
        packager="${jpos.packager:org.jpos.iso.packager.BASE24Packager}">
        <property name="timeout" value="10000" />
    </channel>

    <request-listener class="org.jpos.iso.IncomingListener" logger="Q2"
        realm="incoming-request-listener">
        <property name="space" value="transient:default" />
        <property name="queue" value="TransactionQueue" />
        <property name="timeout" value="35000" />
        <property name="spaceTimeout" value="35000" />
    </request-listener>
</qserver>

To view this discussion visit https://groups.google.com/d/msgid/jpos-users/CAAgSK%3DkH2Y%3DjhaWNWK9Gu0iP5RixD-xma7E1GhB-t4bmrb0NsA%40mail.gmail.com.

[Chandrasekhar Rout]

property name="enabled" value="true" />
Use false for disabled

[Chandrasekhar Rout]

Set the jpos.socket-factory property to org.jpos.iso.GenericSSLSocketFactory to enable SSL.

Set the jpos.socket-factory property to org.jpos.iso.ServerSocketFactory to disable SSL.

It will work for you

[Bruce Maginnis]

There doesn't appear to be a org.jpos.iso.ServerSocketFactory in 2.1.9

Also, how can I optionally configure setting a server-socket-factory or not?

[Mark Salter]

@Bob did you miss this reply?

-- 
Mark

-------- Original Message --------

To view this discussion visit https://groups.google.com/d/msgid/jpos-users/CAAgSK%3DkH2Y%3DjhaWNWK9Gu0iP5RixD-xma7E1GhB-t4bmrb0NsA%40mail.gmail.com.