question

Upvotes
Accepted
26 1 3 12

encryption in channel dictionary

Hi,

I am using channel dictionary to connect to ADS. There is a certificate location to mention in file dictionary but not sure how it is handled for channel dictionary. Can someone explain how following scenarios are handled using channel dictionary ?

  • How RT SDK uses HTTPS based encryption for authentication
  • How should consumer lib be configured to enable HTTPS authentication
  • How encryption can be enabled for the RTO channel such that market data reception is also encrypted and in that case how certificate expiry should be handled
ema-apiencryptionchannel
icon clock
10 |1500

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

@thilinaillangasinghe

Hi,

Thank you for your participation in the forum.

Are any of the replies below satisfactory in resolving your query?

If yes please click the 'Accept' text next to the most appropriate reply. This will guide all community members who have a similar question.

Otherwise please post again offering further insight into your question.

Thanks,

AHS

Please be informed that a reply has been verified as correct in answering the question, and has been marked as such.

Thanks,
AHS

Upvotes
Accepted
79.2k 251 52 74

@thilinaillangasinghe

To connect to the encrypted ADS, please refer to the Configuring Encrypted Connections on ADS article.

To connect to RTO, you can run examples in the RTSDK packages. Please refer to the following articles:

The articles show how to run examples to connect to RTO.

icon clock
10 |1500

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Upvotes
26 1 3 12

Thanks for the reply @Jirapongse,

In C++, EMA, i have to set OpenSSLCAStore value in dictionary configs. In production system, when is server certificate updated ? Is replacing certificate at consumer a manual process ? how does consumer notified to get his certificate updated (in trust stores)?

icon clock
10 |1500

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

@thilinaillangasinghe

The updated server's certificate must be in the client's trust store.

If not, the client must manually update the trust store.

Typically, the server's owner must notify clients about the updated server's certificate.

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.