It's all about the answers!

Ask a question

Is it possible to switch off SSL?


Chetna Warade (106123) | asked Nov 18 '08, 1:50 p.m.
JAZZ DEVELOPER
I am looking to turn SSL authentication off. One of our customers are also looking for this option. What are the implications? We would like to use scm.

Thanks

4 answers



permanent link
Dmitry Karasik (1.8k11) | answered Nov 18 '08, 1:50 p.m.
JAZZ DEVELOPER
I am looking to turn SSL authentication off. One of our customers are
also looking for this option. What are the implications? We would like
to use scm.

Your interactions with the server will not be secure. This will allow
unauthorized users to intercept, inspect and alter your data/passwords.

Why are you looking to do this?

- Dmitry

permanent link
Dmitry Karasik (1.8k11) | answered Nov 18 '08, 1:50 p.m.
JAZZ DEVELOPER
We are running a compression technique called as WAN acceleration and
the customer wants to look at the un-encrypted packets which is only
possible without SSL.

You can decrypt SSL if you have the server's key. There are countless
programs that can do it, such as wireshark.

- Dmitry

permanent link
Chetna Warade (106123) | answered Nov 18 '08, 3:25 p.m.
JAZZ DEVELOPER
I am looking to turn SSL authentication off. One of our customers are
also looking for this option. What are the implications? We would like
to use scm.

Your interactions with the server will not be secure. This will allow
unauthorized users to intercept, inspect and alter your data/passwords.

Why are you looking to do this?

- Dmitry

We are running a compression technique called as WAN acceleration and the customer wants to look at the un-encrypted packets which is only possible without SSL. BTW is it possible? and how?

Chetna

permanent link
Todd Lainhart (40611) | answered Nov 19 '08, 11:28 a.m.
FORUM MODERATOR / JAZZ DEVELOPER
warade wrote:
I am looking to turn SSL authentication off. One of our customers are
also looking for this option. What are the implications? We would
like to use scm.

Thanks


This is possible. Take a look at technote TN0032, "Configuring Proxy Server Caching"
(https://jazz.net/learn/LearnItem.jsp?href=content/tech-notes/rational-team-concert-1_0_1-configuring-proxy-caching-server/index.html)

There's a section in there that describes disabling SSL.

If you or your customer have information to share regarding your WAN acceleration explorations, please post them here
(if appropriate) - we'd love to hear about them.

--
Todd Lainhart
Jazz Repository/Foundation Team

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.