dxaConfigPortAssignmentSsl.json

Source

dxaConfigPortAssignmentSsl.json

Description

A file containing the default configuration of the port assignment protecting the DirX Access Container via TLS. The file creates two configuration objects:

  • a PortAssignment object opening the port with useSsl set to true, and

  • a CryptoContainer object named system.trust.sec-comm.server, through which the port assignment references the crypto material.

The port assignment does not reference a keystore directly - it references the crypto container, which in turn references the Keystore configuration object, its password and the expected entries:

  • the KEY_PAIR entry sec-comm.server.dirxaccess,

  • the CERTIFICATE entry sec-comm.server.dirxaccess.trusted,

  • the CERTIFICATE entry cert-sign.dirxaccess.trusted, which makes the container usable as a truststore as well.

The referenced keystore is created by the corresponding system action dxaCryptoGenerateKeystoreSecCommServer.json.

When the crypto material behind the HTTPS port is exchanged, the crypto container has to be adapted as well - the keystoreId, the keystorePassword, the entry alias values and the entry password values have to match the new keystore. See Securing the port of the Services Container for SSL/TLS connection.

This template is applied implicitly by the DirX Access Installer for every deployment approach - see Startup Folder Prepared by the Installer.

Variables

${dxaServerPort}

Port at which the configuration is assigned (services.http.port.ssl).