Page History

...

The following configuration items have to be added to the Agent's private.conf configuration file. For details see the JS7 - Agent Configuration Items article.

Mutual Authentication

Code Block

language	bash
title	Agent Configuration for Mutual Authentication
linenumbers	true

js7 {
    auth {
        # User accounts for https connections
        users {
            # Controller account for connections by primary/secondary Controller instance
            Controller {
                distinguished-names=[
                    "DNQ=SOS CA, CN=js7-controller-primary, OU=IT, O=SOS, L=Berlin, ST=Berlin, C=DE",
                    "DNQ=SOS CA, CN=js7-controller-secondary, OU=IT, O=SOS, L=Berlin, ST=Berlin, C=DE"
                ]
            }
        }
    }

This setting specifies the distinguished names that are available from the subjects of Controller instance certificates. Note that the common name (CN) attribute specifies the hostname of a Controller instance. The configuration authenticates a given Controller instance as the distinguished name is unique for a server certificate and therefore replaces the use of passwords.

Keystore and truststore locations:

Code Block

language	bash
title	Agent Configuration for Keystore and Truststore Locations
linenumbers	true

js7 {
    web {
        # Locations of keystore and truststore files for HTTPS connections
        https {
            keystore {
                # Default: ${js7.config-directory}"/private/https-keystore.p12"
                file=${js7.config-directory}"/private/https-keystore.p12"
                key-password="jobscheduler"
                store-password="jobscheduler"
                # alias=
            }
            truststores=[
                {
                    # Default: ${js7.config-directory}"/private/https-truststore.p12"
                    file=${js7.config-directory}"/private/https-truststore.p12"
                    store-password="jobscheduler"
                    # alias=
                }
            ]
        }
    }
}

The configuration items described above specify the locations of the keystore and truststore.
Note the optional use of a key password and store password for keystores and the use of a store password for truststores.

...

Space shortcuts

Page tree

Versions Compared

Old Version 10

New Version Current

Key