Set Up Secure Communication

You can configure Secure Socket Layer (SSL) connections to protect data being sent to and from your Knowledge Discovery connectors.

SSL for Incoming Connections

To configure a connector to accept data sent to its ACI port over SSL, follow these steps.

To configure incoming SSL

  1. Stop the connector.
  2. Open the configuration file in a text editor.
  3. In the [Server] section set the SSLConfig parameter to specify the name of a section in the configuration file for the SSL settings. For example:
    [Server]
SSLConfig=SSLOptions

  4. Create a new section in the configuration file (the name must match the name you used in the SSLConfig parameter). Then, use the SSL configuration parameters to specify the details for the connection. You must set the following parameters:

    SSLMethod The SSL protocol to use.
    SSLCertificate The SSL certificate to use (in PEM format).
    SSLPrivateKey The private key for the SSL certificate (in PEM format).

    For example:

    [SSLOptions]
SSLMethod=TLSV1.3
SSLCertificate=host1.crt
SSLPrivateKey=host1.key
  5. Save and close the configuration file.
  6. Restart the connector.

SSL for Outgoing Connections

To configure the connector to send data to other components (for example Connector Framework Server) over SSL, follow these steps.

To configure outgoing SSL connections

  1. Open the Google Calendar Connector configuration file in a text editor.

  2. Specify the name of a section in the configuration file where the SSL settings are provided:

    • To send data to an ingestion server over SSL, set the IngestSSLConfig parameter in the [Ingestion] section. To send data from a single fetch task to an ingestion server over SSL, set IngestSSLConfig in a [TaskName] section.
    • To send data to a View Server over SSL, set the SSLConfig parameter in the [ViewServer] section.

      • You can use the same settings for each connection. For example:

      [Ingestion]
IngestSSLConfig=SSLOptions

  3. Create a new section in the configuration file. The name of the section must match the name you specified in the IngestSSLConfig or SSLConfig parameter. Then specify the SSL settings to use.

    SSLMethod The SSL protocol to use.
    SSLCertificate (Optional) The SSL certificate to use (in PEM format).
    SSLPrivateKey (Optional) The private key for the SSL certificate (in PEM format).

    For example:

    [SSLOptions]
SSLMethod=TLSV1.3
SSLCertificate=host1.crt
SSLPrivateKey=host1.key
  4. Save and close the configuration file.
  5. Restart the connector.