ABL / HTTP Client
Starting with OpenEdge 12.4 client-side TLS authentication has been implemented for the ABL client socket and with that also for the HTTP Client.
For further information, please refer to the documentation: Configure TLS security settings.
Web Services Client
Starting with
OpenEdge 11.4, client authentication has been implemented for the
Web Services client. For further information, refer to article#
Does the OpenEdge client support SSL client authentication for consuming SOAP Web Services ?
Other components do not provide support for client-side certificates at this time.
Progress Application Server for OpenEdge (PASOE)
PASOE fully supports HTTPS client authentication for all available transports (ABL, REST, SOAP).
In order to enable HTTPS client authentication:
- Open OE Explorer/Management Console
- Edit the PAS instance configuration
- In the property configuration page, Select the Advanced tab
- Locate the psc.as.https.clientauth setting and set it to true (see attachment)
HTTPS client authentication can also be changed with the following command:
$ tcman config psc.as.https.clientauth=true
PASOE supports TLS client-authentication for HTTP type clients via Tomcat's https connector.
It is standard Tomcat functionality and PASOE does not do anything to enhance it or degrade it.
When using TLS client-authentication, configure the web application's Spring Security for the 'container' security model, and define the Tomcat ROLE names used in the updated WEB-INF/web.xml.
The Spring Security container security model bridges the Tomcat servlet security with Spring Security's authentication and URL authorization processes.
So you get the ability to use Tomcat's TLS client-authentication with the same Spring Security authorization and Client-Principal handling.
Other components
It was determined that the Progress Product is functioning as designed.
An enhancement to the product can be requested through the Progress Community via an Ideas submission. To promote the Customer feedback is valuable and Idea submissions are monitored by our Product Management team. Enhancement requests are reviewed during the planning phase of each new product release and a list of the enhancements chosen for implementation can be found in the Release Notes documents that accompany each release. Once an Idea is submitted the Progress Software Community will have the opportunity to comment on and vote for the Idea. It's priority will be evaluated as customer demand weighs in through Article Feedback and through vote count in the Ideas Portal
For detailed information on how to submit an Idea, please refer to Knowledge Base article:
How to submit an enhancement request for a Progress product?