You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 3 Next »

What is SSL?

SSL is a protocol of secure communication between server and client through the network.

What is TLS?

It is a newer version of SSL. See "What is SSL?". In practice SSL and TLS names are used interchangeably.

What do I gain from enabling SSL?

It ensures that data sent from application (f.e. report about license usage) and to application (f.e. login credentials) is encrypted. It also allows web browser to verify if connection is secure.

What is keystore?

It is a file secured with password that can contain one or many certificates with or without their private keys.

Which ssl protocols should I enable?

The newer, the better (currently newest is TLS v1.3). But be aware that some older browsers could not support newer protocol versions.

Which ciphers should I enable/disable?

The ones that are known to be broken should be disabled. The list changes with time, new ciphers are created, and some old ones are being broken. Most of the time defaults should be up to date.

I have a certificate file and key, how do I create keystore?

It is described in this article.

How do I migrate SSL settings from Licstat 5.x to 6.x?

In 5.x there were two files needed: certificate (defined as SSL_CERTIFICATE_FILE) and certificate private key (defined as SSL_CERTIFICATE_KEY_FILE). In 6.x both of these files must be placed into keystore. See this link for details. After generating keystore see this link for configuration details.

  • No labels