Use the following procedure to configure SSL in a setup where you configure the DAH in the stand-alone DAH configuration file.
Open the DAH configuration file in a text editor.
Find either the [Server]
section, the [DistributedEngineN]
section, or both.
Add the SSLConfig
setting to specify the section in which you have set the SSL details for the connection, usually SSLOptionN
. For example:
[Server] (other server settings...) SSLConfig=SSLOption0 [DistributedEngine0] SSLConfig=SSLOption0 [DistributedEngine1] SSLConfig=SSLOption1
In this example, incoming ACI calls and outgoing calls to DistributedEngine0
share the same SSL configuration, and outgoing calls to DistributedEngine1
use a different configuration.
Create an [SSLOptionN]
section for each unique SSLConfig
setting. Each SSLOption
entry must contain the SSLMethod
, SSLCertificate
, and SSLPrivateKey
parameters. For example:
[SSLOption0] SSLMethod=TLSV1.2 SSLCertificate=host1.crt SSLPrivateKey=host1.key [SSLOption1] SSLMethod=TLSV1.2 SSLCertificate=host2.crt SSLPrivateKey=host2.key
Save and close the configuration file.
Restart the DAH for your changes to take effect.
|