Skip to main content

Using SSL to Connect

Using SSL to Connect

The %Net.HttpRequestOpens in a new tab class supports SSL connections. To send the request via SSL, do the following:

  1. Set the SSLConfiguration property to the name of the activated SSL/TLS configuration to use.

    For information on creating and managing SSL/TLS configurations, see InterSystems TCP Guide. The SSL/TLS configuration includes an option called Configuration Name, which is the string to use in this setting.

  2. Also do one of the following, depending on whether you are using a proxy server:

    • If you are not using a proxy server, set the Https property to true.

    • If you are using a proxy server, set the ProxyHTTPS property to true.

      In this case, to use an SSL connection to the proxy server itself, set the Https property to true.

Note that when you use an SSL connection to a given server, the default port on that server is assumed to be 443 (the HTTPS port). For example, if you are not using a proxy server and Https is true, this changes the default Port property to 443.

Also see Using a Proxy Server.

Server Identity Checking

By default, when an instance of %Net.HttpRequestOpens in a new tab connects to a SSL/TLS secured web server, it checks whether the certificate server name matches the DNS name used to connect to the server. If these names do not match, the connection is not permitted. This default behavior prevents “man in the middle” attacks and is described in RFC 2818Opens in a new tab, section 3.1; also see RFC 2595Opens in a new tab, section 2.4.

To disable this check, set the SSLCheckServerIdentity property to 0.

FeedbackOpens in a new tab