Distributed Index Handler 24.1

# Set Up SSL Connections

You can configure Secure Socket Layer (SSL) connections between the DIH and other servers. You can configure SSL connections in a combination of different configuration sections:

- `[Server]`. Configure SSL in this section for connections for incoming ACI calls. You can configure this section in either the IDOL configuration file or the DIH configuration file, depending on whether the system uses a unified or stand-alone setup.

  NOTE: In a unified IDOL setup, you must set the SSLConfig configuration parameter in the `[Server]` section, rather than the `[DistributionSettings]` section.

- `[IDOLServerN]` or `[DIHEngineN]`. Configure SSL in this section for connections for outgoing ACI calls. You can set this option in either the IDOL configuration file or DIH configuration file, depending on whether the system uses a unified or stand-alone setup.

  You can also configure SSL connections between DIH and the service port of the child servers by using the ServiceSSLConfig parameter in this section.

- `[IndexServer]`. Configure SSL in this section for connections for the index port.

To configure an SSL connection

1. Open the configuration file in a text editor. If you use a unified setup, use the IDOL Server configuration file. If you use a stand-alone setup, use the DIH configuration file.
2. Find the `[Server]`, `[IDOLServerN]`, or `[DIHEngineN]` section, or create an `[IndexServer]` section.

3. Add the SSLConfig setting to specify the section in which you set the SSL details for the connection, usually `SSLOptionN`. For example:

       [Server]
       (other server settings...)
       SSLConfig=SSLOption0

       [IDOLServer0]
       SSLConfig=SSLOption0

       [IDOLServer1]
       SSLConfig=SSLOption1

   In this example, incoming ACI calls and outgoing calls to `IDOLServer0` share the same SSL configuration, and outgoing calls to `IDOLServer1` use a different configuration.

4. In the `[IDOLServerN]` section or the `[DIHEngineN]` section, add the ServiceSSLConfig setting to the name of the section in which you set the SSL details for connections to the child server service port.

5. Create an `[SSLOptionN]` section for each unique SSLConfig or ServiceSSLConfig setting. Each `SSLOption` entry must contain the SSLMethod, SSLCertificate, and SSLPrivateKey parameters. For example:

       [SSLOption0]
       SSLMethod=TLSV1.3
       SSLCertificate=host1.crt
       SSLPrivateKey=host1.key

       [SSLOption1]
       SSLMethod=TLSV1.3
       SSLCertificate=host2.crt
       SSLPrivateKey=host2.key

6. Save and close the configuration file. Restart IDOL Server (for a unified setup) or the DIH (for a stand-alone setup) for your changes to take effect.

Copyright 2023 Open Text
Version 24.1 | Last updated December 2023

Send documentation feedback

Close

Send documentation feedback

To send feedback using your default email client, open an email window.

Otherwise, send your feedback and the information below to MFI-swpdl.idoldocsfeedback@opentext.com.

We appreciate your feedback!

Product: IDOL Distributed Index Handler 24.1

Topic Title: Set Up SSL Connections