Migrating the DCAS server to use AT-TLS policies
You must migrate DCAS configuration files to use AT-TLS policies.
Complete the following steps to migrate the DCAS server to
use AT-TLS policies:
- Customize the DCAS server for TLS/SSL. For more information, see Customizing DCAS for TLS/SSL.
- Migrate the DCAS configuration file. For more information about DCAS configuration keywords and equivalent AT-TLS policies, see Table 1.
DCAS configuration | AT-TLS equivalent statement | AT-TLS policy statement |
---|---|---|
ClientAuth Local1 | HandshakeRole ServerWithClientAuth |
TTLSEnvironmentAction |
ClientAuth Local2 | HandshakeRole ServerWithClientAuth |
TTLSEnvironmentAction |
IPADDR | LocalAddr | TTLSRule |
KEYRING | Keyring | TTLSEnvironmentAction -> |
LDAPPORT | GSK_LDAP_SERVER_PORT | TTLSEnvironmentAction -> |
LDAPSERVER | GSK_LDAP_SERVER | TTLSEnvironmentAction -> |
Port | LocalPortRange | TTLSRule |
SAFKEYRING | Keyring | TTLSEnvironmentAction -> |
STASHFILE | KeyringStashFile | TTLSEnvironmentAction -> |
V3CIPHER | V3CipherSuites | TTLSEnvironmentAction -> |