Configuring a Server-Side SSL Proxy Server

The server-side SSL Proxy can be used by clients that use the client-side SSL Proxy, either stand-alone or embedded, or by clients that use the WebSession SSL API.

To run an SSL Server Proxy you need to

1. Edit the serverproxy.properties file
2. Run the SSLServerProxy application that is delivered with the SSL Proxy package.

Step 1: Edit the serverproxy.properties file

keyStore = pathname

Use this property to specify the full pathname of the key store that you want the SSL Server Proxy to use. On Windows systems be sure to double all backslash characters. This property is required.

keyPassword = password

This property specifies the password protecting the key store specified in the keyStore property. This property is required.

sslPort = portNumber

Use this property to specify the port number on which incoming connections will be accepted.

lmhost = hostname[,hostname]...

Use this property to specify a list of the machines in which the I/O Concepts WebSession License Servers are running.

allowClientProxyIPs = ipAddress[,ipAddress]...

Use this property to specify one or more IP addresses from which client connections will be accepted and proxied. Connections from clients at other IP addresses will be rejected and immediately closed. If you omit this property then connections will be accepted from any IP address.

logfile = fileName
logictrace = true | false
dstrace = true | false
lictrace = true | false

It is recommended that you enable logging to a local file until you are confident that the SSL Server Proxy is setup properly.

Example

keyStore = /websess/ssl/keystore.jks
keyPassword = changeit
sslPort = 10101
lmhost = localhost

Step 2: Run the Server-Side SSL Server Proxy Application

Run the SSLServerProxy application that is installed with the SSL Proxy package.