Dear forum,
i have a small question:
Our security scanner say about Axway Synchrony Gateway Inrechange embedded HTTPS-Server:
"SSL Weak Cipher Suites Supported."
Description:The remote host supports the use of SSL ciphers that offer either weak
encryption or no encryption at all.
Note: This is considerably easier to exploit if the attacker is on the
same physical network.
Do you know, how i can disable it? The general solution, what i found for Apache/Tomcat, was it:
Disable weak SSL ciphers.
Apache:
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
Tomcat:
ciphers=SSL_RSA_WITH_RC4_128_MD5,SSL_RSA_WITH_RC4_128_SHA,SSL_DHE_RSA_WITH_3DES_
EDE_CBC_SHA
But the main question - which Axway-Configuration file must be edited?
Thanks in advance for your help.
BR,
Roman
P.S.: I got today this answer from "Gateway"-topic ( Julien -many thanks for it!):
.. it seems to be possible to restrict the use of weak encryption algorithms with SSL by editing the build/conf/sslciphersuites.xml to comment the cipher suite you don't need. ..
But this file is missing on my system?!
Disable weak SSL ciphers
Published in November 17th, 2010
Posted by Tony in Axway Forum Syndicate
No Comments
Disable weak SSL ciphers.
Published in November 16th, 2010
Posted by Tony in Axway Forum Syndicate
Dear forum,
i have a small question:
Our security scanner say about Axway Synchrony Gatewa Inrechange embedded HTTPS-Server:
"SSL Weak Cipher Suites Supported."
Description:The remote host supports the use of SSL ciphers that offer either weak
encryption or no encryption at all.
Note: This is considerably easier to exploit if the attacker is on the
same physical network.
Do you know, how i can disable it? The general solution, what i found for Apache/Tomcat, was it:
Disable weak SSL ciphers.
Apache:
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
Tomcat:
ciphers=SSL_RSA_WITH_RC4_128_MD5,SSL_RSA_WITH_RC4_128_SHA,SSL_DHE_RSA_WITH_3DES_
EDE_CBC_SHA
But the main question - which Axway-Configuration file must be edited?
Thanks in advance for your help.
BR,
Roman
i have a small question:
Our security scanner say about Axway Synchrony Gatewa Inrechange embedded HTTPS-Server:
"SSL Weak Cipher Suites Supported."
Description:The remote host supports the use of SSL ciphers that offer either weak
encryption or no encryption at all.
Note: This is considerably easier to exploit if the attacker is on the
same physical network.
Do you know, how i can disable it? The general solution, what i found for Apache/Tomcat, was it:
Disable weak SSL ciphers.
Apache:
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
Tomcat:
ciphers=SSL_RSA_WITH_RC4_128_MD5,SSL_RSA_WITH_RC4_128_SHA,SSL_DHE_RSA_WITH_3DES_
EDE_CBC_SHA
But the main question - which Axway-Configuration file must be edited?
Thanks in advance for your help.
BR,
Roman
automator with unix - aix 6.1
Published in November 10th, 2010
Posted by Tony in Axway Forum Syndicate
i seem to be getting the above error when trying to validate a version from automator with our jdewards system (v9)
The job is to run on a unix server (domain server ) but when ever i try to validate the report it comes up with the
DataProvider@$UNLOCK_ENV.1003 error
the following is what i get in my opspserver.lg1
10/11/10 13:12:39 E (3028) 2928.TaGenjob_GetJDEUbeDataList [L3345]: Bad end -1
10/11/10 13:12:39 I (3028) 2928.Executer_Run: End trans GET_JDEUBEDATA_LIST, rc=-1, time=5855sec
10/11/10 13:14:35 I (3028) 2928.Executer_Run [L424]: Start trans GET_SP_DS_VERSIONS (0 args): <> [to E1SCHED.aggind.co.uk]
10/11/10 13:14:36 E (3028) 2928.TO_OpenSession [L478]: Bad end cnx with <570BLOGIC><10515>: [T000: Unknown error]
10/11/10 13:14:36 E (3028) 2928.TO_ExecTransaction: Cannot Open Session with '570BLOGIC' (port = '10515') trans name 'GET_DSVERSIONS', argc_out '0'
10/11/10 13:14:36 I (3028) 2928.Executer_Run: End trans GET_SP_DS_VERSIONS, rc=0, time=1sec
10/11/10 13:14:39 I (3028) 2744.Executer_Run: Start trans SET_LOG_LEVEL (1 args): <Ascii:1> [to E1SCHED.aggind.co.uk]
10/11/10 13:14:39 I (3028) 2744.Executer_Run: End trans SET_LOG_LEVEL, rc=0, time=0sec
10/11/10 13:14:40 I (3028) 4076.Executer_Run: Start trans SET_MAX_LOG_SIZE (1 args): <Ascii:2097000> [to E1SCHED.aggind.co.uk]
10/11/10 13:14:40 I (3028) 4076.Executer_Run: End trans SET_MAX_LOG_SIZE, rc=0, time=0sec
10/11/10 13:14:40 I (3028) 2984.Executer_Run [L424]: Start trans GET_SP_DS_VERSIONS (0 args): <> [to E1SCHED.aggind.co.uk]
10/11/10 13:14:41 E (3028) 2984.TO_OpenSession [L478]: Bad end cnx with <570BLOGIC><10515>: [T000: Unknown error]
10/11/10 13:14:41 E (3028) 2984.TO_ExecTransaction: Cannot Open Session with '570BLOGIC' (port = '10515') trans name 'GET_DSVERSIONS', argc_out '0'
10/11/10 13:14:41 I (3028) 2984.Executer_Run: End trans GET_SP_DS_VERSIONS, rc=0, time=1sec
10/11/10 13:16:19 I (3028) 2984.Executer_Run [L424]: Start trans GET_SP_DS_VERSIONS (0 args): <> [to E1SCHED.aggind.co.uk]
10/11/10 13:16:20 I (3028) 2984.Executer_Run: End trans GET_SP_DS_VERSIONS, rc=0, time=1sec
10/11/10 13:16:27 I (3028) 2984.Executer_Run [L424]: Start trans GET_SP_DS_VERSIONS (0 args): <> [to E1SCHED.aggind.co.uk]
10/11/10 13:16:27 I (3028) 2984.Executer_Run: End trans GET_SP_DS_VERSIONS, rc=0, time=0sec
10/11/10 13:17:03 I (3028) 2984.Executer_Run: Start trans GET_JDEUBEDATA_LIST (4 args): <Int:1, Ascii:jde, Ascii:PWD~QCb9]];]wWd)]Chs1,USER~SCHEDULER1,ROLE~*ALL,VERSION~AI0004,UBE~R014021
,ENV~PY900, Ascii:570BLOGIC> [to E1SCHED.aggind.co.uk]
any ideas on what could be causing this. there are no errors currently in the unix logs so the above is the log that is being created on the production server.
any help with this would be good
The job is to run on a unix server (domain server ) but when ever i try to validate the report it comes up with the
DataProvider@$UNLOCK_ENV.1003 error
the following is what i get in my opspserver.lg1
10/11/10 13:12:39 E (3028) 2928.TaGenjob_GetJDEUbeDataList [L3345]: Bad end -1
10/11/10 13:12:39 I (3028) 2928.Executer_Run: End trans GET_JDEUBEDATA_LIST, rc=-1, time=5855sec
10/11/10 13:14:35 I (3028) 2928.Executer_Run [L424]: Start trans GET_SP_DS_VERSIONS (0 args): <> [to E1SCHED.aggind.co.uk]
10/11/10 13:14:36 E (3028) 2928.TO_OpenSession [L478]: Bad end cnx with <570BLOGIC><10515>: [T000: Unknown error]
10/11/10 13:14:36 E (3028) 2928.TO_ExecTransaction: Cannot Open Session with '570BLOGIC' (port = '10515') trans name 'GET_DSVERSIONS', argc_out '0'
10/11/10 13:14:36 I (3028) 2928.Executer_Run: End trans GET_SP_DS_VERSIONS, rc=0, time=1sec
10/11/10 13:14:39 I (3028) 2744.Executer_Run: Start trans SET_LOG_LEVEL (1 args): <Ascii:1> [to E1SCHED.aggind.co.uk]
10/11/10 13:14:39 I (3028) 2744.Executer_Run: End trans SET_LOG_LEVEL, rc=0, time=0sec
10/11/10 13:14:40 I (3028) 4076.Executer_Run: Start trans SET_MAX_LOG_SIZE (1 args): <Ascii:2097000> [to E1SCHED.aggind.co.uk]
10/11/10 13:14:40 I (3028) 4076.Executer_Run: End trans SET_MAX_LOG_SIZE, rc=0, time=0sec
10/11/10 13:14:40 I (3028) 2984.Executer_Run [L424]: Start trans GET_SP_DS_VERSIONS (0 args): <> [to E1SCHED.aggind.co.uk]
10/11/10 13:14:41 E (3028) 2984.TO_OpenSession [L478]: Bad end cnx with <570BLOGIC><10515>: [T000: Unknown error]
10/11/10 13:14:41 E (3028) 2984.TO_ExecTransaction: Cannot Open Session with '570BLOGIC' (port = '10515') trans name 'GET_DSVERSIONS', argc_out '0'
10/11/10 13:14:41 I (3028) 2984.Executer_Run: End trans GET_SP_DS_VERSIONS, rc=0, time=1sec
10/11/10 13:16:19 I (3028) 2984.Executer_Run [L424]: Start trans GET_SP_DS_VERSIONS (0 args): <> [to E1SCHED.aggind.co.uk]
10/11/10 13:16:20 I (3028) 2984.Executer_Run: End trans GET_SP_DS_VERSIONS, rc=0, time=1sec
10/11/10 13:16:27 I (3028) 2984.Executer_Run [L424]: Start trans GET_SP_DS_VERSIONS (0 args): <> [to E1SCHED.aggind.co.uk]
10/11/10 13:16:27 I (3028) 2984.Executer_Run: End trans GET_SP_DS_VERSIONS, rc=0, time=0sec
10/11/10 13:17:03 I (3028) 2984.Executer_Run: Start trans GET_JDEUBEDATA_LIST (4 args): <Int:1, Ascii:jde, Ascii:PWD~QCb9]];]wWd)]Chs1,USER~SCHEDULER1,ROLE~*ALL,VERSION~AI0004,UBE~R014021
,ENV~PY900, Ascii:570BLOGIC> [to E1SCHED.aggind.co.uk]
any ideas on what could be causing this. there are no errors currently in the unix logs so the above is the log that is being created on the production server.
any help with this would be good
[Sentinel 3.3] How To (un)index Fields in default’s Tracked Objects
Published in November 10th, 2010
Posted by Tony in Axway Forum Syndicate
Hi everyone,
For performance purposes we would like to index or unindex some fields in the defaults tracked objects XFBTransfers & XFBLogs.
The problem is that the defaults fields (EventDate, EventID, IsAlert,...) are greyed and cannot be (un)checked.
Does anyone knows how these fields can be altered ?
thanks in advance.
QB.
For performance purposes we would like to index or unindex some fields in the defaults tracked objects XFBTransfers & XFBLogs.
The problem is that the defaults fields (EventDate, EventID, IsAlert,...) are greyed and cannot be (un)checked.
Does anyone knows how these fields can be altered ?
thanks in advance.
QB.
Migration 2.3 vers 2.6
Published in November 10th, 2010
Posted by Tony in Axway Forum Syndicate
J'ai installé uneversion 2.6 alors que la version 2.3 était installé sur un autre répertoire.
J'essaie de migrer les "communication media files avec la commande:
CFTMI230 MIGR type=COM, direct=FROMCOM, ifname=/softs/cft/cft_2.3/fildat/cft_com, ofname=com_output.xml
et j'obtiens;
M23020I CFTMIGR
M23020I Version 1.0
M23020I © Copyright SOPRA 1997-2001
M23020I ====> Starting Session on 10/11/2010 Time is 10:23:26
M23020I
M23026E MIGR _ Error (CMI_ERR_COM_OPEN_OUTPUT)
M23020I Number of Command(s) 1
M23020I Number of error(s) 1
M23020I Ending Session on 10/11/2010 Time is 10:23:26
M23020I Session active for 0:00:00
Erreur dans la commande
Code : 15
mon fichier /softs/cft/cft_2.3/fildat/cft_com existe:
ls -l /softs/cft/cft_2.3/fildat/cft_com
-rwxrw-rw- 1 cftadm cftgroup 1026088 Nov 9 23:20 /softs/cft/cft_2.3/fildat/cft_com
Pouvez-vous m'aider ?
J'essaie de migrer les "communication media files avec la commande:
CFTMI230 MIGR type=COM, direct=FROMCOM, ifname=/softs/cft/cft_2.3/fildat/cft_com, ofname=com_output.xml
et j'obtiens;
M23020I CFTMIGR
M23020I Version 1.0
M23020I © Copyright SOPRA 1997-2001
M23020I ====> Starting Session on 10/11/2010 Time is 10:23:26
M23020I
M23026E MIGR _ Error (CMI_ERR_COM_OPEN_OUTPUT)
M23020I Number of Command(s) 1
M23020I Number of error(s) 1
M23020I Ending Session on 10/11/2010 Time is 10:23:26
M23020I Session active for 0:00:00
Erreur dans la commande
Code : 15
mon fichier /softs/cft/cft_2.3/fildat/cft_com existe:
ls -l /softs/cft/cft_2.3/fildat/cft_com
-rwxrw-rw- 1 cftadm cftgroup 1026088 Nov 9 23:20 /softs/cft/cft_2.3/fildat/cft_com
Pouvez-vous m'aider ?
Axway User Group Meeting - West Coast - 12/9
Published in November 9th, 2010
Posted by Tony in Axway Forum Syndicate
Join Axway and your peers on December 9
Axway is holding an online User Group meeting for customers (North America). Join your peers for an interactive discussion on use of Axway solutions specifically, Axway Secure Transport, Transfer, Gateway, Interchange, Sentinel and Integrator.
Join Axway and members of the West Coast User Group for a call that will cover:
- Axway Product Roadmap and Market Positioning
- Interactive Discussion on topics you provide to us before the webinar
- Plans for next set of meetings, User Group organization, and next steps
When: December 9, 2010 from 11:00 am PST
Where: Reserve your Webinar seat now at: https://www1.gotomeeting.com/register/561015617
To register for ongoing updates on Axway User Groups and regional meetings near you visit: http://www.axway.com/usergroups
For questions, please contact Elayne DeLeo: edeleo@axway.com.
Axway is holding an online User Group meeting for customers (North America). Join your peers for an interactive discussion on use of Axway solutions specifically, Axway Secure Transport, Transfer, Gateway, Interchange, Sentinel and Integrator.
Join Axway and members of the West Coast User Group for a call that will cover:
- Axway Product Roadmap and Market Positioning
- Interactive Discussion on topics you provide to us before the webinar
- Plans for next set of meetings, User Group organization, and next steps
When: December 9, 2010 from 11:00 am PST
Where: Reserve your Webinar seat now at: https://www1.gotomeeting.com/register/561015617
To register for ongoing updates on Axway User Groups and regional meetings near you visit: http://www.axway.com/usergroups
For questions, please contact Elayne DeLeo: edeleo@axway.com.
Durée de rétention Mailbox
Published in November 5th, 2010
Posted by Tony in Axway Forum Syndicate
Bonjour,
Sur la GW que j'utilise, nous n'avons que 3 jours de rétention des flux dans la mailbox.
Comment puis-je étendre cette durée à 7 jours par exemple ?
Merci d'avance.
Sur la GW que j'utilise, nous n'avons que 3 jours de rétention des flux dans la mailbox.
Comment puis-je étendre cette durée à 7 jours par exemple ?
Merci d'avance.
Automatic refresh in Sentinel Monitoring Plus
Published in November 4th, 2010
Posted by Tony in Axway Forum Syndicate
We have installed Sentinel Monitoring Plus and when we got the first demo (april 2010) we found that there was no automatic refresh function, like in the java sentinel.
So we contacted Axway which has registered a BOA (Axway term for feature request) but still they haven't solved it.
Has anyone else solved this issue?
I don't understand why Axway doesn't build a Sentinel client which handles push events so that the client doesn't have to make a refresh.
Anyway, if someone know of a solution on how to solve this in Sentinel Monitoring Plus please share it with me.
So we contacted Axway which has registered a BOA (Axway term for feature request) but still they haven't solved it.
Has anyone else solved this issue?
I don't understand why Axway doesn't build a Sentinel client which handles push events so that the client doesn't have to make a refresh.
Anyway, if someone know of a solution on how to solve this in Sentinel Monitoring Plus please share it with me.
User List Variable to Dashboard List Variable (solved)
Published in November 3rd, 2010
Posted by Tony in Axway Forum Syndicate
Hi pals!
I've come again to ask you a question.
As you know, or may do not know, I'm using dashboards to display the data from 3 customers. I've made a table to display the data of those customers, the user can choose the customer through a list. That list, at the moment, is a Dashboard variable with the values put on it manually.
What I want, as you might guess, is the list to get the values from a User Variable. I've tried with String Variable and List Variable like appears when you make a list manually:
A;B;C and {A;B;C}
This way I think I'll be able to use the same dashboard for a lot of customers instead one dashboard per customer.
PS: Also I'd like to know if I can get rid of the 'Open' label that appears whe you put the mouse over a button as it hides data.
As always, Thank you for your support.
I've come again to ask you a question.
As you know, or may do not know, I'm using dashboards to display the data from 3 customers. I've made a table to display the data of those customers, the user can choose the customer through a list. That list, at the moment, is a Dashboard variable with the values put on it manually.
What I want, as you might guess, is the list to get the values from a User Variable. I've tried with String Variable and List Variable like appears when you make a list manually:
A;B;C and {A;B;C}
This way I think I'll be able to use the same dashboard for a lot of customers instead one dashboard per customer.
PS: Also I'd like to know if I can get rid of the 'Open' label that appears whe you put the mouse over a button as it hides data.
As always, Thank you for your support.
Codification, special characters, accents
Published in November 2nd, 2010
Posted by Tony in Axway Forum Syndicate
Hello everybody.
I have a problem, I have configured this receive file:
CFTRECV id = EKECPXXX,
fname = '/stagearea/in/xxx.&idt',
wfname = '/stagearea/in/xxx.&idt.tmp',
fcode = ascii,
ftype = T,
faction = delete,
mode = replace
But when I edit the file xxx I cannot see special characters, for example the word "domiciliación" appears as domiciliación
Do you know what is going on?
I have a problem, I have configured this receive file:
CFTRECV id = EKECPXXX,
fname = '/stagearea/in/xxx.&idt',
wfname = '/stagearea/in/xxx.&idt.tmp',
fcode = ascii,
ftype = T,
faction = delete,
mode = replace
But when I edit the file xxx I cannot see special characters, for example the word "domiciliación" appears as domiciliación
Do you know what is going on?
Social Network
| M | T | W | T | F | S | S |
|---|---|---|---|---|---|---|
| « Jan | ||||||
| 1 | 2 | 3 | 4 | 5 | ||
| 6 | 7 | 8 | 9 | 10 | 11 | 12 |
| 13 | 14 | 15 | 16 | 17 | 18 | 19 |
| 20 | 21 | 22 | 23 | 24 | 25 | 26 |
| 27 | 28 | 29 | ||||
Recent Entries
- CFT 2.4.1 SP9
- Transfer from Mainframe to Gateway RFD
- VFD Permissions
- Forum Search Function
- AIX 7
- Clean Dashboard links (SOLVED)
- gatestart
- [Resolved] Transcoding / Transcodage
- File renaming
- Query from Request
Recent Comments
- Keine Kommentare vorhanden.
Translators
Categories
- 2008 Connections Conference
- Accountability
- Axway
- Axway Forum Syndicate
- Being Nice
- Bug Fixes
- Communication
- Community
- General
- How-To
- Integrator
- Integrator v2.1.1
- New Website
- News
- Non-Technical
- Production Down
- Secure Relay
- Sorry
- SSH Keys
- SSL/TLS
- Support
- Synchrony
- Synchrony Gateway
- Synchrony Integrator
- Synchrony Sentinel
- Synchrony Transfer
- Technical
- The big company always wins
- Tip-of-the-day
- Uncategorized
- Upgrades
- Welcome
- Wells Fargo
- What to Expect
- XSR
Archives
- January 2011
- December 2010
- November 2010
- October 2010
- September 2010
- August 2010
- July 2010
- June 2010
- May 2010
- April 2010
- March 2010
- February 2010
- January 2010
- December 2009
- November 2009
- October 2009
- September 2009
- August 2009
- July 2009
- June 2009
- May 2009
- April 2009
- March 2009
- February 2009
- January 2009
- December 2008
- November 2008
- October 2008
Pages
Blogroll
- Axway - Axway’s Main Homepage
- Axway Support - The Official Axway Support Site
- Axway User Forum - ALL - RSS feed for all categories & forums
- Help With Axway Forum - A forum designated to answering questions
- Tumbleweed Support - The official Tumbleweed Global Support Site
Meta
Copyright (c) 2008 Axway User All rights reserved.