Usage/purpose of the " OpenSSL " utility which we are shipping with our CA Access Gateway (SPS).

Products

• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)
• SITEMINDER
• CA Single Sign On Agents (SiteMinder)

Issue/Introduction

As we are aware, we are shipping the " OpenSSL " utility with our CA Access Gateway (SPS).

Also, we usually use this openssl command line tool for generating keys and certificates.

We would like to know If we use this OpenSSL for any other purpose apart from generating keys and certificates.

Basically we would like to know If we use this OpenSSL in any of the request flow? For any backend communication or for any SSL communication?

Environment

Release: Applicable to all the supported CA Access Gateway (SPS) releases.
Component: SMSPS

Resolution

OpenSSL is activated only when communication has happened in " SSL ", that is if " SSL " is enabled in CA Access Gateway (SPS) then OpenSSL libraries will be called from CA Access Gateway (SPS).

OpenSSL libraries will be invoked for SSL communication requests in CA Access Gateway (SPS).

Basically CA Access Gateway uses the " OpenSSL cryptography toolkit " that implements the SSL v2/v3 and Transport Layer Security (TLS v1) network protocols and related cryptography standards.