Skip to content
English
  • There are no suggestions because the search field is empty.

Client configuration update required for Portal v4.6+ / OE11.6-OE11.7+SSL

If you are using SSL and OE11.6 or OE11.7, for the ProTop client to work with the Portal 4.6 and above, you need to take action 

How do I know if I'm using SSL?

All OSes 

Open your [PROTOPDIR]/bin/localenv

  • If you do not have a localenv, you are not using SSL and can ignore the rest of the article.

Check if you see the following 2 lines :

  • On Unix
    • export PORTALPORT=443
    • export PORTALOPTIONS='-ssl -nohostverify'
  • On Windows
    • SET PORTALPORT=443
    • SET PORTALOPTIONS='-ssl -nohostverify'

Example :

Should I take action?

If you do have both lines, you are using SSL, and need to take the action described bellow.

If you don't, you are not using SSL and can ignore the rest of the article.

 

If I'm using SSL and OE11.6 or OE11.7, what actions should I take?

All OSes 

  1. Log into your server as the owner of ProTop
  2. Disable cron or the WIN service
  3. Stop ProTop (remove PROTOP tmp *.flg)
  4. cd to your ProTop bin directory
  5. edit your localenv[.bat] file
  6. change your PORTALOPTIONS variable to this:
    1. UNIX: export PORTALOPTIONS='-ssl -nohostverify -sslprotocols TLSv1.2 -sslciphers ECDHE-RSA-AES128-GCM-SHA256'
    2. WINDOWS: SET PORTALOPTIONS='-ssl -nohostverify -sslprotocols TLSv1.2 -sslciphers ECDHE-RSA-AES128-GCM-SHA256'
  7. Test the configuration by sending an alert to the portal: sendalert[.sh] friendlyName -type alarm -m ssltest -msg "Test alert sent using SSL"
  8. If the alert does not arrive please reverse the change and contact support@wss.com
  9. Otherwise, enable cron or the WIN service to restart ProTop

What happens if I don't take action?

We will deploy version 4.6.1 or above. 

After the deployment begins, clients who have not updated their configuration will see their data stop flowing into the portal. More specifically:

  • Data will cease being recorded on the portal until the correct TLS 1.2 parameters are implemented.

  • You will receive a PAGE notification from the ProTop Portal indicating a "HeartBeat is missing" as the portal will no longer receive data from your client installation.