Under this section, define the following server SSL settings.

ciphers

The list of allowed SSL ciphers – for example:

ciphers: "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,\
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_GCM_SHA256"

Mandatory: No. Omitting this parameter allows all the ciphers CA Gateway supports.

client-auth

Set this parameter value to:

Need

Mandatory: Yes.

enabled

true to enable SSL/TLS, false otherwise.

Mandatory: No. This optional parameter defaults to true.

insecureMode

true when enabled is false , omit this parameter otherwise. This parameter reinforces that the user truly wants to run CA Gateway as an insecure setup.

The insecure mode is for testing environments only.

Mandatory:  No. This optional parameter defaults to false.

key-alias

The alias of the SSL key in the keystore.

Mandatory: Yes.

key-store

The path of the keystore that contains the SSL server certificate. 

See Configuring CA Gateway for how to reference file paths. 

Mandatory : Yes.

key-store-password

The password of the keystore that contains the server SSL certificate.

Mandatory: Yes.

key-store-type

The type of keystore containing the SSL server certificate.

Type

Description

​jks 

Java keystore​

pkcs12

PKCS #12 keystore

Mandatory: Yes.

protocol

Set this parameter to:

TLS

Mandatory: Only when enabled is true.

trust-store

The full path of the truststore that contains the CA certificates.

See Configuring CA Gateway for how to reference file paths. 

Mandatory: Yes.

trust-store-password

The password of the truststore that contains the CA certificates.

Mandatory: Yes.

trust-store-type

The type of truststore containing the CA certificates.

Type

Description

​jks 

Java truststore​

pkcs12

PKCS #12 truststore

Mandatory: Yes.