ssl_attributes specifies the attributes of Secure Sockets Layer (SSL) connections.
Note
This parameter is introduced since ODP V4.2.1. The min_tls_version key is added since ODP V4.2.2.
Attribute |
Description |
|---|---|
| Parameter type | JSON string |
| Default value | Empty string |
| Value range | N/A |
| Effective only after ODP restart | No |
Considerations
In a JSON string, the first key is using-ssl, which specifies to force use SSL for connection establishment. The second key is min_tls_version, which specifies the Transport Layer Security (TLS) version for SSL connections. Valid values of min_tls_version are described as follows:
none: indicates no limitation.{"min_tls_version" : "tlsv1"}: The earlier version is tlsv1.
{"min_tls_version" : "tlsv1.1"}: The earliest version is tlsv1.1. In this case, logon with tlsv1 will be rejected.
{"min_tls_version" : "tlsv1.2"}: The earliest version is tlsv1.2. In this case, logon with tlsv1 or tlsv1.1 will be rejected.
{"min_tls_version" : "tlsv1.3"}: The earliest version is tlsv1.3. In this case, logon with tlsv1, tlsv1.1, or tlsv1.2 will be rejected.
Examples
alter proxyconfig set ssl_attributes = '{"using_ssl" : "ENABLE_FORCE", "min_tls_version" : "TLSV1.1"}';