Enable 2-way SSL for all transactions

Hi Carlos,

 

Please kindly fill in a support ticket ([email protected]) because OneSpan Sign only enables 2-way SSL on a request basis. Along with the ticket, please supply:

- the account email

- environment (sandbox vs production, CA or US)

- your public certificates, including the whole chain of ROOT, INTERMEDIATE, final (Please do not include your Private Keys)

The 2 way ssl is deployed to the 8443 port (https://sandbox.esignlive.com:8443), so you may also want to block calls through port 443 for the account

 

In terms of the Java programming, because I haven't tested it out myself, so I can only provide some of my thoughts and understandings:

-when making a call using eslClient

(1)you need to specify port 8443 after the API url

(2)you may also need to override the SDK source code (Client.class) regarding to SSLContext, and specify your identityKeyStore and trustKeyStore there

-event listener

From the best of my knowledge, I don't think the callback notifications are sent over 2-way SSL, you can mention it in your ticket and ask for confirmation as well.

 

Duo