Re: SOAP Secure Both Ways?

2020-04-01 Thread Tom Benedict via 4D_Tech
Thanks for the response Neil.

Yes, data goes both directions, so 443 is used in both places. But only the 
external system has the SSL Certificate. 

Tom

> On Apr 1, 2020, at 10:49, Dennis, Neil  wrote:
> 
>> Does the customer’s internally hosted 4D app also need to be configured with 
>> a SSL certificate in order to exchange data over SOAP securely?
> 
> It depends on the data flow...
> 
> The machine serving the data needs SSL, the machine connecting and retrieving 
> the data needs to use the secure port.
> 
> So if both machines are being servers for some requests and both are clients 
> for others they both need SSL. Does that make sense? Only the machine 
> accepting connections needs the certs.
> 
> Neil
**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

RE: SOAP Secure Both Ways?

2020-04-01 Thread Dennis, Neil via 4D_Tech
> Does the customer’s internally hosted 4D app also need to be configured with 
> a SSL certificate in order to exchange data over SOAP securely?

It depends on the data flow...

The machine serving the data needs SSL, the machine connecting and retrieving 
the data needs to use the secure port.

So if both machines are being servers for some requests and both are clients 
for others they both need SSL. Does that make sense? Only the machine accepting 
connections needs the certs.

Neil







--

Privacy Disclaimer: This message contains confidential information and is 
intended only for the named addressee. If you are not the named addressee you 
should not disseminate, distribute or copy this email. Please delete this email 
from your system and notify the sender immediately by replying to this email.  
If you are not the intended recipient you are notified that disclosing, 
copying, distributing or taking any action in reliance on the contents of this 
information is strictly prohibited.

The Alternative Investments division of UMB Fund Services provides a full range 
of services to hedge funds, funds of funds and private equity funds.  Any tax 
advice in this communication is not intended to be used, and cannot be used, by 
a client or any other person or entity for the purpose of (a) avoiding 
penalties that may be imposed on any taxpayer or (b) promoting, marketing, or 
recommending to another party any matter addressed herein.
**
4D Internet Users Group (4D iNUG)
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**