SSL
excludeProtocols - includeProtocols - allowCiphers - denyCiphers config file
As of UW release 6.5.8.28, UW now supports TLS version 1.3. The following configuration is recommended for systems running 6.5.8.28, and higher. (For older releases of UW, please see this article.) /stoneware/config/excludeProtocols TLSv1 TLSv1.1 # ...
How do I renew my SSL certificate?
This process is in 3 basic parts. 1 - Create the Keystore 2 - Generate the CSR 3 - Import the cert The documentation below has several methods to complete this process. The first is a how to use a free Java gui tool called Portecle, the second is ...
Update the keystore file on the relay
When a customer is sent a new keystore from stoneware support, they will want to take the .zip file and store that in a safe location in case we ever need to update the keystore prior to the certificate expiring. Upon receipt of the zip file, the ...
POODLE and webNetwork
What has happened? A security vulnerability called POODLE has been found in SSL 3.0. Despite being an older encryption technology that is only used in less than 1% of SSL traffic, most web servers still allowed this protocol to enable older browsers ...
excludeProtocols - includeProtocols - allowCiphers - denyCiphers config file Legacy Configuration
As of release 6.5.8.28, UW now supports TLS version 1.3. For customers running UW 6.5.8.28, and higher, we recommend the following configuration. For customers running older releases of UW, the following configurations are still applicable. Starting ...
Convert PFX certificate to JKS keystore using KeyStore Explorer
Issue: Can we import the wildcard SSL Certificate we already have on our IIS server(s)? Solution: Please see the following documentation on how to convert a PFX certificate, exported from an IIS server, to a Java JKS keystore. Once you have your new ...
Making sure the full certificate chain is imported into the Stoneware Keystore
Open the keystore using KeyStore Explorer Right-Click on the keypair, and choose to Export > Certificate Chain Open Internet Explorer and go to : Tools Internet Options Content Certificates Import Select the certificate you were sent from your CA ...
Problems connecting to webNetwork with the newest browsers.
Problem: Customer was able to connect to webnetwork 6.2 with Firefox 43 and Chrome 47 but after Firefox 44 and Chrome 48 the browser says Secure Connection Failed. Cause: With the new browsers they have changed their security requirements. An ...
SSL certificate installation - part 1
Problem: Need to create and add new wildcard SSL certificate to Unified Workspace server. Prerequisite(s): Download and install KeyStore Explorer tool on workstation Solution(s): Below instructions will walk you through process of creating a new ...
SSL certificate installation - part 2
Problem: Need to create and add new wildcard SSL certificate to Unified Workspace server. Prerequisite(s): Completed part 1 Access to keystore password Solution(s): Below instructions will walk you through process of placing a new keystore on ...
Convert JKS keystore to PFX Certificate using KeyStore Explorer
Issue: Can we export the wildcard SSL Certificate from the Unified Workspace Java keystore for use on our IIS server(s)? Solution: Please see the following documentation on how to convert your UW Java keystore to a PFX Certificate that can be ...