spdsserv.parm Options for TLS
The following options are supported in the spdsserv.parm
server parameter file to configure secure sockets communication on
SPD Server. The options are dependent on the host environment. The
server authentication options must be set to enable basic secure sockets
communication.
Server Authentication Options
The following option enables secure sockets communication on both UNIX and Windows
SPD Server hosts.
SSLSECURE= NO | PREFERRED | YES
Specifies how
TLS is used by SPD Server. The default value is NO, which specifies that client connections
are not secured.
To enable secure sockets communication, specify YES or PREFERRED. YES specifies that
the server requires a secure client connection. A client that is not configured for
TLS cannot connect to SPD Server. PREFERRED specifies that a secure connection is
made if the client has TLS configured. Clients that are not configured for TLS can
connect, but these connections are not secure.
For more
information, see SSLSECURE= Parameter File Option.
UNIX:
These options configure
the certificates, public key, and private key on a UNIX SPD Server
host:
SSLALLOWUNXDS
Specifies whether TLS or UNIX
domain sockets are used to secure data communication between clients that are on the same
host as SPD Server. The default value, NOSSLALLOWUNXDS, specifies to use TLS for both
local and remote
client/server data communications.
For more information, see SSLALLOWUNXDS Parameter File Option.
SSLCALISTLOC=
Specifies the location of the public certificate or certificates for trusted certificate
authorities (CA). This option is required to enable TLS.
For more
information, see SSLCALISTLOC= Parameter File Option.
SSLCERTLOC=
Specifies the location of the digital certificate for the machine's public key. This
option is required to enable TLS.
For more
information, see SSLCERTLOC= Parameter File Option.
SSLPKCS12LOC=
(Optional) Specifies
the location of the PKCS #12 encoding package file. When SSLPKCS12LOC=
is set, SSLCERTLOC= and SSLPVTKEYLOC= are ignored.
For more
information, see SSLPKCS12LOC= Parameter File Option.
SSLPVTKEYLOC=
Specifies the location of the private key that corresponds to the digital certificate.
This option is required to enable TLS.
For more
information, see SSLPVTKEYLOC= Parameter File Option.
Windows:
These options configure
certificates for a Windows SPD Server host:
SSLCERTSUBJ=
Specifies the subject name of the digital certificate that TLS should use. Use SSLCERTISS=
and SSLCERTSERIAL= or SSLCERTSUBJ=. Do not specify both.
For more
information, see SSLCERTSUBJ= Parameter File Option.
Client Authentication Options
SSLCLIENTAUTH | NOSSLCLIENTAUTH.
Specifies whether the
server should verify the client’s certificate in addition to
the server’s certificate. The default is NOSSLCLIENTAUTH.
For more
information, see SSLCLIENTAUTH Parameter File Option.
SSLCRLLOC=
Specifies the location of a Certificate Revocation List (CRL). Used in conjunction
with SSLCRLCHECK.
For more
information, see SSLCRLLOC= Parameter File Option.
SSLREQCERT=
Specifies the protocol
for exchanging digital certificates at your site. The valid values
are ALLOW, DEMAND, NEVER, or TRY. Used in conjunction with SSLCLIENTAUTH.
For more
information, see SSLREQCERT= Parameter File Option.
Copyright © SAS Institute Inc. All Rights Reserved.
Last updated: February 3, 2017