Configuring SSL for a Service Broker

The Service Broker reads all security parameters from a security configuration file (*.ssc). You will find a security configuration file template in

<installation_directory>\Applications\StreamServer\<version>\
Common\Templates\keywords.ssc

All keywords and values are described in

<installation_directory>\Applications\StreamServer\<version>\
Common\Templates\template.ssc

To configure SSL parameters using the Control Center

1	Create the security configuration file. See The Service Broker security configuration file below.

2	In the Control Center, select the Service Broker service (4.x Services node).

3	In the Properties view, right-click the Security configuration file property and select Edit property. The Edit Value dialog box opens.

4	In the Value field, specify the path to the security configuration file and click OK.

To configure SSL parameters using command line arguments

1	Create the security configuration file. See The Service Broker security configuration file below.

2	Use the following command line arguments:

 

-securityconfiguration <path>	Path to the service configuration file. This corresponds to the property Security configuration file in the Control Center.
-workdir <path>	Path to the Service Broker working directory (WIN32). This corresponds to the property Working directory in the Control Center.
-wd <path>	Path to the Service Broker working directory (UNIX). This corresponds to the property Working directory in the Control Center.

The Service Broker security configuration file

In the Service Broker security configuration file you specify both the server side (client to Service Broker and service registration) and the client side (Service Broker to server) security configurations. You can specify several security configuration sections in this file:

FILE	Describes all necessary information needed to set up an SSL client or SSL server. All the certificate and private key data is stored in files.
XKMS	Describes all necessary information needed to set up an SSL client or SSL server. All the certificate information is retrieved from an XKMS server (Trust Server). Only the root CA that verifies the identity of the XKMS server is stored in a file.
SERVER_PORT_BINDING	The server port binding that connects the data communication parameters (port number, threads, etc.) to a FILE or XKMS configuration. All server port bindings used by the Service Broker must have the name SERVICE_BROKER_SSL_SERVER
CLIENT_PORT_BINDING	The client port binding that connects the data communication parameters (port number, threads, etc.) to a FILE or XKMS configuration. All client port bindings used by the Service Broker must have the name SERVICE_BROKER_SSL_CLIENT