How to Create SSL Configuration Programmatically?

Question

Question

Evgeny Shvarov · May 5, 2019

Hi Community!

How do you create SSL Configuration for InterSystems IRIS programmatically? E.g. for installation or deployment case?

E.g. if I need to create a very simple "default" SSL client configuration to let HTPPS Get requests to an arbitrary server?

Discussion (5)2

Log in or sign up to continue

Dmitry Maslennikov · May 20, 2019

ClassMethod GetSSLConfiguration(host) As %String
{
  NEW $NAMESPACE
  SET $NAMESPACE = "%SYS"
  
  IF '##class(Security.SSLConfigs).Exists(host) {
    DO ##class(Security.SSLConfigs).Create(host)
  }
  QUIT host
}

Set tRequest = ##class(%Net.HttpRequest).%New()
Set tRequest.Server = "community.intersystems.com"
Set tRequest.Https = 1
Set tRequest.SSLConfiguration = ..GetSSLConfiguration(tRequest.Server)
....

1 0

score 0 · Answer 1 · 2019-05-06T06:47:13-04:00

The class Security.SSLConfigs can give you an API to create SSL configurations.
Look at the "Create" classmethod.

score 0 · Answer 2 · 2019-05-20T15:41:14-04:00

Thanks @Dmitry Maslennikov !

I'm looking for 'client' configuration. is this a case?

How "community.intersystems.com" as a name will work here?

score 0 · Answer 3 · 2019-05-06T07:00:05-04:00

As mentioned earlier, you can use the Security.SSLConfigs class. You'll also want to think about how to deliver the CA certificate. That's needed to verify you're connecting to the right server and not someone impersonating the server. Possibly you could add it to your installer?

score 0 · Answer 4 · 2019-05-20T15:48:41-04:00

This is only example and yes, for client, where community.intersystems.com is a server for request to. To simplify I just create ssl config with server's name