Borland VisiBroker® 7.0 - Borland Technical Publications

Security Properties for C++Property Description Defaultvbroker.security.trustpointsRepository Specifies a path to the directory containing trustedcertificates. These are given in the formDirectory:. For example:vbroker.security.trustpointsRepository=Directory:c:\data\identities\Deltavbroker.security.assertions.trust.Use to specify a list of trusted roles (specify with the format@). is uniquely identified foreach trust assertion rule as a list of digits.For example, settingvbroker.security.assertions.trust.1=ServerAdmin@defaultmeans this process trusts any assertion made by theServerAdmin role in the default authorization domain.vbroker.security.assertions.trust.all Setting to true will trust all the assertion made by peers. falsevbroker.security.server.requireUPIdentityvbroker.security.cipherListvbroker.security.wallet.typevbroker.security.wallet.identityvbroker.security.wallet.passwordvbroker.security.CRLRepositoryA server side only property. If the server requires the client tosend a Username/Password for authentication (regardless ofcertificate-based authentication), set to true. Ifvbroker.security.login.realms is set, this property isautomatically set to true. However, you can override it byexplicitly setting it in the property file.Set this to a list of comma-separated ciphers to be enabledby default on startup. If not set, a default list of cipher suiteswill be enabled. These should be valid SSL Ciphers.A wallet is a set of directories containing encrypted privatekeys and certificate chains for each identity. Use thisproperty to point to the directory containing the directories forall identities, using the format: Directory:Points to a directory within the path defined invbroker.security.wallet.type that contains keys and/orcertificate information for a specific identity.Specifies the password used to decrypt the private key or thepassword associated with the login.Use to specify the directory where you want the list of serialnumbers of revoked certificates (Certificate Revocation List(CRL)), issued by the Certificate Authority (CA), to reside. Allfiles in the directory will be loaded and interpreted as CRL—no longer valid. The CRL file must be in the DER format.Once the CRLs are loaded, VisiSecure examines allcertificates sent by a peer during SSL handshake. If any ofthe peer certificates appears in the CRLs, an exception willbe thrown and the connection will be refused. For moreinformation, see “Certificate Revocation List (CRL) andrevoked certificate serial numbers” on page 16.n/an/an/an/an/an/an/an/aChapter 10: Security Properties for C++ 93