SSL/TLS

Use SSL/TLS to communicate securely; obtain information about SSL/TLS connection in use.

Background Information

Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer (SSL), are cryptographic protocols that provide communication security over the Internet. InterSystems uses the term SSL/TLS to refer collectively to these protocols.

Available Tools

SSL/TLS configurations

Caché supports the ability to store a SSL/TLS configuration and specify an associated name. When you need an SSL/TLS connection (for HTTP communications, for example), you provide the applicable configuration name, and Caché automatically handles the SSL/TLS connection.

See the Caché Security Administration Guide.

Configurations are stored in the Security.SSLConfigsOpens in a new tab class, which provides an object-based API; this class cannot be accessed via SQL.

Availability: All namespaces.

%SYSTEM.Security.Users class

Provides methods that you can use to get information about the SSL/TLS connection in use on the principal device, if any. These methods include:

SSLGetCipher()
SSLGetCipherList()
SSLGetLastError()
SSLGetPeerCertificate()
SSLGetPeerName()
SSLGetProtocol()
SSLPeekClientHello()

Availability: All namespaces.

Reminder

The special variable $SYSTEM is bound to the %SYSTEM package. This means that (for ObjectScript) instead of ##class(%SYSTEM.class).method(), you can use $SYSTEM.class.method().