01.06.2013 Views

OpenEdge Development: Mobile Applications - Product ...

OpenEdge Development: Mobile Applications - Product ...

OpenEdge Development: Mobile Applications - Product ...

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

SSL connections<br />

Security considerations<br />

Secure Sockets Layer (SSL) allows you to configure secure (encrypted) HTTPS<br />

connections between your <strong>Mobile</strong> App and the <strong>Mobile</strong> services hosted in your <strong>Mobile</strong><br />

Web application. You typically configure a <strong>Mobile</strong> Web application to use HTTPS<br />

connections when the data being sent between the <strong>Mobile</strong> App and the Web<br />

application is restricted to only authenticated users or when logging into the <strong>Mobile</strong><br />

application (to protect the exchange of user credentials).<br />

When a <strong>Mobile</strong> application is configured to use HTTPS, the <strong>Mobile</strong> App communicates<br />

with its <strong>Mobile</strong> services using URIs based on HTTPS (HTTP over SSL). To enable SSL,<br />

you configure appropriate digital certificate stores for the Web server and configure the<br />

<strong>Mobile</strong> Web application's security policy to require HTTPS connections from its clients<br />

(<strong>Mobile</strong> Apps). You might also require the use of SSL connections between the <strong>Mobile</strong><br />

Web application and its ABL application services on the AppServer when the<br />

AppServer is located on the site's intranet. You also need to ensure that the mobile<br />

devices or Web browsers that run the <strong>Mobile</strong> App are configured to validate the<br />

Certificate Authority (CA) public certificates who issued the Web server's server<br />

certificate.<br />

You can configure HTTPS for a <strong>Mobile</strong> application in exactly the same way as for a<br />

REST application. For more information on configuring a REST application and its<br />

AppServer for SSL, see the sections on SSL support for REST applications in<br />

<strong>OpenEdge</strong> Application Server: Administration. For more information on using SSL in<br />

<strong>OpenEdge</strong> generally, see <strong>OpenEdge</strong> Getting Started: Core Business Services -<br />

Security and Auditing.<br />

<strong>OpenEdge</strong> ® <strong>Development</strong>: <strong>Mobile</strong> <strong>Applications</strong> 145

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!