You can configure Secure Socket Layer (SSL) connections between the DIH and other servers. You can configure SSL connections in a combination of different configuration sections:
[Server]
. Configure SSL in this section for connections for incoming ACI calls. You can configure this section in either the IDOL configuration file or the DIH configuration file, depending on whether the system uses a unified or stand-alone setup.
NOTE: In a unified IDOL setup, you must set the SSLConfig
configuration parameter in the [Server]
section, rather than the [DistributionSettings]
section.
[IDOLServerN]
or [DIHEngineN]
. Configure SSL in this section for connections for outgoing ACI calls. You can set this option in either the IDOL configuration file or DIH configuration file, depending on whether the system uses a unified or stand-alone setup.
You can also configure SSL connections between DIH and the service port of the child servers by using the ServiceSSLConfig
parameter in this section.
[IndexServer]
. Configure SSL in this section for connections for the index port.[Server]
, [IDOLServerN]
, or [DIHEngineN]
section, or create an [IndexServer]
section.Add the SSLConfig
setting to specify the section in which you set the SSL details for the connection, usually SSLOptionN
. For example:
[Server] (other server settings...) SSLConfig=SSLOption0 [IDOLServer0] SSLConfig=SSLOption0 [IDOLServer1] SSLConfig=SSLOption1
In this example, incoming ACI calls and outgoing calls to IDOLServer0
share the same SSL configuration, and outgoing calls to IDOLServer1
use a different configuration.
[IDOLServerN]
section or the [DIHEngineN]
section, add the ServiceSSLConfig
setting to the name of the section in which you set the SSL details for connections to the child server service port.Create an [SSLOptionN]
section for each unique SSLConfig
or ServiceSSLConfig
setting. Each SSLOption
entry must contain the SSLMethod
, SSLCertificate
, and SSLPrivateKey
parameters. For example:
[SSLOption0] SSLMethod=TLSV1.3 SSLCertificate=host1.crt SSLPrivateKey=host1.key [SSLOption1] SSLMethod=TLSV1.3 SSLCertificate=host2.crt SSLPrivateKey=host2.key
|