Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Henrik Troeng (bisse766)
Swedish Unemployment Funds
Platform and Operations
Swedish Unemployment Funds
SE
bisse766 Member since 2014 5 posts
Swedish Unemployment Funds
Posted: Apr 15, 2016
Last activity: Apr 18, 2016
Posted: 15 Apr 2016 4:26 EDT
Last activity: 18 Apr 2016 7:29 EDT
Closed

Possible to config AES to use client certificate over https?

Hi,

I am about to secure the PRPC server(s) with https and client certificate for 2 way validation. I will also configure a security constraint for the PRSoapServlet allowing only SSL connections (the standard PRServlet still needs to be available via http for our end users (ssl is managed in the firewall/loadbalancer for end users).

However this means all web service clients using it has to use https and also have the certificate installed.

We have AES and I believe - please correct me if I'm wrong - that the surveilled nodes do send health pulses to the AES, but when the AESmanager wants to take a deeper look (like clicking on Reports, Requestors, Agents etc) the AES node do connect to the surveilled node via the PRSoapServlet.

So my worry is that if I force the PRSoapServlet to only answer to requests over SSL I will break AES.

Is it possible to also have the AES node using the certificate and only connect with https?

Thanks in advance

Henrik

To see attachments, please log in.
Data Integration
Security

Posted: 8 years ago
Posted: 18 Apr 2016 7:29 EDT
Rajeev Ranjan (ranjr)
PEGA
Principal Technical Solutions Engineer
PEG
PL

I am not mucj sure but yes you can connect the AES node using the https. Alternatively you can use the JMS to do so.

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice