<< Click to display Table of Contents >> Navigation:  IT-Security & Audit > SSL / HTTPS

In Cordaware bestinformed Version 6, the TCP connection between the Infoserver and the Infoclient is secured via SSL. An SSL connection is enabled by default for the administration web page (HTTP).

 

Settings for the SSL-secured HTTP connection on the Infoserver

 

By default, SSL-secured HTTP (HTTPS) access to the web interface is active and runs on port 8043. The settings for the SSL-secured connection on the Infoserver can be adjusted in the configuration file “infoclient.ini” via the Serverboard in the [ssl] section. Look for the “ssl” entry under the SSL settings. Double-click to edit the value. Set it to "false" to disable SSL-secured access, and to "true" to enable it. Then save the changes by pressing the Enter key and restart the service for the web interface so that the changes take effect. The service can also be restarted via the web interface in the Serverboard using the red Webinterface (server) reboot button.

 

For instructions on how to import your own certificates for web access, see the chapter Connection to the web interface via SSL.

 

Notice on SSL secured LDAP connections

 

When accessing a LDAP directory service over a SSL secured connection, the Infoserver won't accept the LDAP-server's certificate if the issuer is unknown to the Infoserver, respectively the computer on which the Infoserver is operated on. This is most probably the case, if the issuer of the SSL certificate is the framework which operates the LDAP (e.g. Novell eDirectory). In this case, it is necessary to additionally install the root-certificate of the framework and to add it to the list of trusted Certfication Authorities on the computer that operates the Infoserver. Installing root-certificates of Certification Authorities is subject of the Certificates Snap-In of the Microsoft Management Console.

 

Certificate Conversion

 

Cordaware bestinformed requires certificates encoded in Base64. Therefore, certificates in other formats must be converted before use. We recommend using the OpenSSL project for conversion. For more information, visit: https://openssl-library.org/.

 

These instructions are based on OpenSSL version 4.0.0. If you are using a different version, please verify that the commands listed work identically.

 

By default, certificates in Windows are exported in PFX format. This format bundles the server certificate, the private key, and the Certificate Authority (CA) into a single password-protected file. To use the certificates in bestinformed, they must be separately encoded in Base64.

 

To convert and extract the respective certificates or key files, you can use the following commands from the OpenSSL project. Replace “certificate.pfx” with the actual filename of your certificate.

 

Extract the server certificate

 

Extract private key

 

Extract Certificate Authority (CA)