Page History
...
Add the following entries to the JETTY_BASE/start.d/ssl.ini configuration file:
| Code Block | ||||||
|---|---|---|---|---|---|---|
| ||||||
## enable use of client authentication certificates jetty.sslContext.needClientAuth=false jetty.sslContext.wantClientAuth=true jetty.sslContext.endpointIdentificationAlgorithm= |
...
JOC Cockpit has to hold a certificate in its truststore that allows validation of the clients' certificate. The location of the Jetty truststore is specified with the JETTY_BASE/start.d/ssl.ini configuration file.
- Self-signed Certificates
- JOC Cockpit holds the client's certificate in its truststore.
- Each client's individual certificate is required to be in place.
- CA signed Certificates
- JOC Cockpit holds the CA certificate, i.e. the Root CA Certificate/Intermediate CA Certificate(s), in its truststore.
- Connections from any clients that use a certificate signed by the CA will be accepted.
- This approach is more flexible as it does not require modification of the Jetty truststore when adding/removing clients.
...
Overview
Content Tools