Modifying the LDAP server configuration for SSL

For IBM® Sametime® 9.0 and earlier releases, modify the IBM Sametime Community Server's configuration by making these changes to the sametime.ini file. As of IBM Sametime 9.0 Hot Fix 1, these settings were deprecated. They are only used if no trust store is set in the TLS configuration page. Refer to Setting up TLS Configuration.

Before you begin

For information pertaining to TLS configuration, see the topic Configuring TLS for the Community Server.

About this task

Modify the Sametime server's configuration by making the following changes to the sametime.ini file.

Procedure

Open the sametime.ini file in a text editor.
If these settings are not present in the [Config] section of the sametime.ini file, manually enter them. Follow the instructions for your operating system.
AIX® and Linux™
```
[Config]
javax.net.ssl.keyStore=/local/notesdata/key.jks 
javax.net.ssl.trustStore=/local/notesdata/key.jks 
javax.net.ssl.keyStorePassword=keystore_password
javax.net.ssl.trustStorePassword=truststore_password
```
Note: Specify the complete path name of the key.jks file for both the javax.net.ssl.keyStore and the javax.net.ssl.trustStore settings. Specify the password that you provided for key.jks when you created it for both the javax.net.ssl.keyStorePassword and javax.net.ssl.trustStorePassword settings.
Windows™
```
[Config] 
javax.net.ssl.keyStore=c:\program files\IBM\domino\jvm\bin\stkeys.jks
javax.net.ssl.trustStore=c:\program files\IBM\domino\jvm\bin\stkeys.jks
javax.net.ssl.keyStorePassword=passw0rd 
javax.net.ssl.trustStorePassword=passw0rd 
```
Where:
- For the javax.net.ssl.keyStore and the javax.net.ssl.trustStore settings, you specify the complete path name for the stkeys.jks file.
- For the javax.net.ssl.keyStorePassword and the javax.net.ssl.trustStorePassword settings, you specify the password that you provided for the stkeys.jks file when you created it.

If these two lines appear in the sametime.ini file, remove them:

javax.net.ssl.trustStoreType=JKS 
javax.net.ssl.keyStoreType=JKS

Save and close the sametime.ini file.
Restart the Sametime Community Server.