Skip to main content
Question

SSL/TLS advice for server and clients

  • August 29, 2019
  • 1 reply
  • 6 views
Bryan_H
Forum|alt.badge.img+2

Hi, had some questions from a client about setting up SSL/TLS in an OEM context.
How can we distribute and install (if necessary) signed keys to clients automatically? They will support vsql, JDBC, ODBC clients.
Is there a way to automate key/cert installation with MC?
Is there a way other than listing IP's to limit host connections? E.g. does the TLS authentication check hostname as well as username?
(Jim may add more questions and comments!)

    1 reply

    skeswani
    Forum|alt.badge.img
    • skeswani
    • Participating Frequently
    • August 29, 2019

    yes, TLS will check hostname must match dns
    TLS will check certs are valid ((i.e. not expired or post dated)

    Accepting certs automatically is a security risk, accepting keys is automatically is probably even worse.
    Having said that its trivial to automate, all you have to do is copy the key or cert onto the machine where you want to use it

    Still scrolling?
    Ask a question
    Terms & ConditionsAccessibility statement