1 Reply Latest reply on Nov 3, 2017 11:01 AM by shawkins

    Teiid SSL over odata

    mirco73

      Hi,

      I've followed the instraction in Secure Teiid JDBC Transport with SSL  trying to get the odata results (eg. with a browser) via SSL

      I've changed the CLI commands in this way:

       

      /profile=ha/subsystem=teiid/transport=odata:write-attribute(name=ssl-mode,value=enabled) 

      /profile=ha/subsystem=teiid/transport=odata:write-attribute(name=ssl-authentication-mode,value=1-way) 

      /profile=ha/subsystem=teiid/transport=odata:write-attribute(name=ssl-ssl-protocol,value=TLSv1) 

      /profile=ha/subsystem=teiid/transport=odata:write-attribute(name=ssl-keymanagement-algorithm,value=SunX509) 

      /profile=ha/subsystem=teiid/transport=odata:write-attribute(name=ssl-enabled-cipher-suites,value="SSL_RSA_WITH_RC4_128_MD5,SSL_RSA_WITH_RC4_128_SHA") 

      /profile=ha/subsystem=teiid/transport=odata:write-attribute(name=keystore-name,value=ssl-example.keystore) 

      /profile=ha/subsystem=teiid/transport=odata:write-attribute(name=keystore-password,value=casale) 

      /profile=ha/subsystem=teiid/transport=odata:write-attribute(name=keystore-type,value=JKS) 

      /profile=ha/subsystem=teiid/transport=odata:write-attribute(name=keystore-key-alias,value=teiid) 

      /profile=ha/subsystem=teiid/transport=odata:write-attribute(name=keystore-key-password,value=casale) 

      /profile=ha/subsystem=teiid/transport=odata:write-attribute(name=truststore-name,value=ssl-example.truststore) 

      /profile=ha/subsystem=teiid/transport=odata:write-attribute(name=truststore-password,value=casale)

       

      Unfortunately this does not seem to work, maybe I'm missing some configurations somewhere else, becouse the system seems not to be listening on the https ports.

      I would expect it to answer on such an url:

       

      https://casteiidprd01.casalelug.ch:8443/odata4/CASALE.1/Entities/BadgeEntity?$format=JSON

       

      thanks,

      Mirco