SSL/TLS Options - Universal Connector for PeopleSoft


Description

The SSL/TLS options are used to configure the environment and behavior of HTTPS connections with the PeopleSoft system. The SSL/TLS configuration options can be used with any command, but they only impact HTTPS connections.

Command Line Syntax

The following figure illustrates the command line syntax of the /wiki/spaces/DEV/pages/120324397, using their command line, long form.

{-ssl_cipher_list list -ssl_cipher_suites list  [-ca_certs file] [-cert file] [-days number] [-private_key file [-private_key_pwd password]] [-verify_host_name option] [-verify_peer option]

SSL/TLS Options List

The following table describes all SSL/TLS configuration options and provides the command line, long form of each option illustrated in the SSL/TLS options /wiki/spaces/DEV/pages/120324397, above.


Configuration
Option Name

Command Line
Long Form

Description

SSL_CIPHER_LIST

-ssl_cipher_list

SSL/TLS cipher suites acceptable for use by the SSL/TLS protocol.

SSL_CIPHER_SUITES

-ssl_cipher_suites

SSL/TLS 1.3 specific cipher suites acceptable for use by the SSL/TLS 1.3 protocol.

CERTIFICATE

-cert

File name of the PEM-formatted X.509 certificate that identifies Universal Connector for PeopleSoft.

CERTIFICATE_EXPIRATION_NOTICE

-days

Number of days prior to certificate expiration to begin issuing informational messages about the expiration.

CA_CERTIFICATES

-ca_certs

Location of the PEM-formatted trusted Certificate Authority (CA) X.509 certificates file.

PRIVATE_KEY

-port

Path of the UPPS PEM-formatted RSA private key.

PRIVATE_KEY_PWD

-port

Password for the UPPS PRIVATE_KEY.

VERIFY_HOST_NAME

-verify_host_name

Specification for whether or not the server's X.509 certificate host name field must be verified.

VERIFY_PEER

-verify_peer

Specification for whether or not the server's X.509 certificate is verified.