Secure connections

This chapter provides general information about configuring secure connections between Codar and some commonly used components of Codar. You must consult your security expert for more detailed information about configuring secure connections in your environment.

Note Codar only accepts secure connections using the TLSv1 protocol. If you are integrating with an application and are using secure connections, you must configure the application to use the TLSv1 protocol with Codar.

Information includes:

The function of the secure connection is configured by the com.hp.csa.service.ssl.insecure property in the CSA_HOME\jboss‑as\standalone\deployments\csa.war\WEB-INF\classes\
csa.properties
file. That is, a secure connection can be configured to only authenticate the certificate root and verify that the certificate presented by another application or component has not been revoked (default). Or, a secure connection can be configured to authenticate the certificate root, verify that the certificate presented by another application or component has not been revoked, verify the certificate's validity (beginning and expiration dates), and validate the certificate's hostname (configured as the certificate's common name). See the Secure Connections section in Codar Console properties for more information about the com.hp.csa.service.ssl.insecure property.