Defining HTTPS Connectors

Edit online

About this task

If you want to use secure web service or browser connections to communicate with Infrastructure Data Collector, you must set up server and client side HTTPS connectors.

Server-side Configuration

Edit online

About this task

To define an HTTPS connector on the server side

Procedure

  1. Obtain an appropriate server certificate and place it in the desired folder.
  2. Define the location of the server certificate with the parameter keystoreFile (replace the default value).
  3. Set the CN of the certificate to be identical to the URL of the server, without the "https://".

    For example, for a server under https://MyWebServer:8443/, the CN is "MyWebServer".

  4. Set the keystore password parameter (keystorePass).

    Infrastructure Data Collector supports both types of Java keystores:

    • KeystoreType="JKS" (default)
    • KeystoreType="PKCS12" (PKCS#12 keystore)

Client-side Configuration

Edit online

About this task

To accept an HTTPS connection on the client side

Import the server certificate into you browser trust store (or in the case of a PKI, preferably the CA certificate that has issued the server certificate).

Note: If you are accessing UDDI from a Java client using Oracle JSSE, you must also set a truststore via Djavax.net.ssl.trustStorePassword=<your_trust_store_here>. Alternatively, if you have not imported the server certificate and the browser asks if you trust the certificate, select Yes at the prompt if you trust the certificate.