On this page:

24.68 Two Factor Authentication 24.70 Trusted Client

24.69TLS / SSL (Encryption)

The TLS / SSL (Encryption) configuration category includes the following configurable options:

TLS KeyStore Filename
TLS KeyStore Password
TLS KeyStore Key Alias
TLS KeyStore Key Password
TLS Enabled
TLS Client Authentication
TLS TrustStore Filename
TLS TrustStore Password
TLS Cipher Whitelist
TLS Cipher Blacklist
TLS Protocol Whitelist
TLS Protocol Blacklist

24.69.1Property: TLS KeyStore Filename

Property Key
Property Type	LOCAL_FILEPATH
Description	The filename for the TLS KeyStore used to hold private keys for TLS connections. This can be in the format `classpath:path/to/file.p12` or `file:///path/to/file.p12`. Valid file extensions are `.jks` (Java Keystore) or `.p12` (PKCS#12 store).
Default Value	(no default)
Is Optional?	Yes

24.69.2Property: TLS KeyStore Password

Property Key
Property Type	PASSWORD
Description	The password for the TLS KeyStore (leave blank if the store has no password).
Default Value	(no default)
Is Optional?	Yes

24.69.3Property: TLS KeyStore Key Alias

Property Key
Property Type	STRING
Description	The alias for the specific key within the KeyStore that should be selected for incoming TLS connections.
Default Value	(no default)
Is Optional?	Yes

24.69.4Property: TLS KeyStore Key Password

Property Key
Property Type	PASSWORD
Description	The password for the specific key within the KeyStore (leave blank if the key has no password).
Default Value	(no default)
Is Optional?	Yes

24.69.5Property: TLS Enabled

Property Key
Property Type	BOOLEAN
Description	Should the listener for this module require TLS (i.e. SSL or HTTPS) encryption for incoming connections?
Default Value	`false`
Is Optional?	No

24.69.6Property: TLS Client Authentication

Property Key
Property Type	BOOLEAN
Description	Should the listener for this module require incoming connections to authenticate using TLS Client Authentication?
Default Value	`false`
Is Optional?	No

24.69.7Property: TLS TrustStore Filename

Property Key
Property Type	LOCAL_FILEPATH
Description	The filename for the TLS TrustStore used to hold trusted certificates for TLS connections. This can be in the format `classpath:path/to/file.p12` or `file:///path/to/file.p12`. Valid file extensions are `.jks` (Java Keystore) or `.p12` (PKCS#12 store).
Default Value	(no default)
Is Optional?	Yes

24.69.8Property: TLS TrustStore Password

Property Key
Property Type	PASSWORD
Description	The password for the TLS TrustStore (leave blank if the store has no password).
Default Value	(no default)
Is Optional?	Yes

24.69.9Property: TLS Cipher Whitelist

Property Key
Property Type	STRING
Description	If specified, contains a space-separated list of ciphers that are permitted for use by TLS clients. See Selecting Ciphers and Protocol for more information.
Default Value	(no default)
Is Optional?	Yes

24.69.10Property: TLS Cipher Blacklist

Property Key
Property Type	STRING
Description	If specified, contains a space-separated list of ciphers that are not permitted for use by TLS clients. See Selecting Ciphers and Protocol for more information.
Default Value	(no default)
Is Optional?	Yes

24.69.11Property: TLS Protocol Whitelist

Property Key
Property Type	STRING
Description	If specified, contains a space-separated list of protocols that are permitted for use by TLS clients. See Selecting Ciphers and Protocol for more information.
Default Value	(no default)
Is Optional?	Yes

24.69.12Property: TLS Protocol Blacklist

Property Key
Property Type	STRING
Description	If specified, contains a space-separated list of protocols that are not permitted for use by TLS clients. See Selecting Ciphers and Protocol for more information.
Default Value	(no default)
Is Optional?	Yes

24.68 Two Factor Authentication 24.70 Trusted Client