The configuration settings below refer to a Java keystore or truststore with a location that is represented by a path to an existing file of the type “jks”. Such a file is generated with the Java keytool.
For related information also see the section
Client side authentication
# enable client side SSL authentication with keystore
sslclientauth.enabled=false
# path to the keystore location
keystore.location=
# keystore password, if set to ':console' it will be prompted in the console
keystore.pw=
#keystore.pw=:console
The keystore must contain the client certificate and the private key with which the client will authenticate itself. This certificate must be configured as trusted in the application server.
Hostname verification
# enable hostname verification
https.verifyHostName=false
The parameter “https.verifyHostName” determines if the hostname of the certificate is verified against the hostname of the peer.
Server side authentication
# enable server side SSL authentication with truststore
sslserverauth.enabled=false
# path to the truststore location
trustedKeystore.location=
# truststore password, if set to ':console' it will be prompted in the console
trustedKeystore.pw=
#trustedKeystore.pw=:console
The truststore must contain the certificate of the server or a trusted root certificate with which the server certificate was signed.