User guide

12-1
Chapter 12
Using SSL for Smart Repository
Smart Repository supports encrypted communication using SSL.
This chapter explains SSL communication for the Smart Repository.
Smart Repository can be used with the following products:
• Interstage Application Server Enterprise Edition
• Interstage Application Server Standard Edition
• Interstage Application Server Plus
SSL Communication Targets
Smart Repository supports SSL communication for the following communication paths:
Communication path SSL communication target
Communication with command Communication between the Smart Repository and the
following commands can be encrypted:
- ldapsearch command
- ldapmodify command
- ldapdelete command
Communication with application Communication between the Smart Repository and client
applications can be encrypted.
Communication in replication
operating mode
Communication between master and slave repositories in
replication operation mode can be encrypted.
Note
When the Entry Administration Tool and entry administration command (irepmodifyent) are used, SSL
communication cannot be used for communication paths. Use them in a security-oriented environment
by executing them on the same machine in the repository.
Client Authentication
After client authentication is performed, only the SSL client that has presented a certificate issued by a
specific CA is permitted to access the SSL server. This can prevent user spoofing.