Transfer layer security enhancement (TLS/SSL)
support the transport layer encryption (TLS/SSL) in synchronous mode (Sync).
First, you need to prepare the certificate file (with private key) used for encrypting. The certificate file used for testing purpose can be generated by the CertificateCreator in SuperSocket (http://supersocket.codeplex.com/releases/view/59311), and then import
the generated certificate file (. pfx) into the test server's trusted certificate directory. Production certificate need to submit an application to the certificate authority to get a certificate file. After receive the certificate file, export the
certificate file with private key (
.pfx) in the production server's certificate manager.
Then, add the transfer security node in the configuration file like below code:
Server node attribute security = "tls", said the transport layer to enable TLS encryption.
The new certificate child node is used for configuring the transport layer encryption certificate with the certificate file path and password which will be used for this server instance.