ADSS Admin Guide

Property

Description

Certificate publishing configuration for ASC_DirectoryThread

ADSS Certification Service can be configured to generate the certificates for users on the Active Directory. If so then following properties come in use:

• CERTIFICATE_PUBLISHING_INTERVAL = 5
  Time interval to publish the user certificates on an LDAP server when ADSS Server is configured for this purpose.
• DEFAULT_SERVICE_PROTOCOL = HTTP
  Protocol used by the ASC_DirectoryThread to communicate with Service instance when ADSS Server is configured to generate the certificates against the Active Directory users. Possible values are: HTTP and HTTPS.
• DEFAULT_SERVICE_PORT = 8777
  Port used by the ASC_DirectoryThread to communicate with Service instance when ADSS Server is configured to generate the certificates against the Active Directory users. Possible values are: 8777, 8778 and 8779.

Signature Padding Scheme

Define the signature padding scheme to be used while core is performing signing operations. The default parameter value is:

• SIGNATURE_PADDING_SCHEME = PKCS1

Possible values are PKCS1 and PSS

Note: Click here for more details on limitations when PSS padding scheme is used.

Database connections settings

In ADSS Server Core settings, database connection can be re-configured so that the connections can be reused when future requests to the database are required. The default parameter values are:

• CONNECTION_POOL_QUERY_TIMEOUT = 180
  Number of seconds a query will wait for the database to return the results before terminating the connection.
• ENABLE_DB_CONNECTION_COUNTER = FALSE
  Used to display the database connections details of logs. To enable logging, uncomment the "File Appenders for Temporary c3p0" appender in core/log.properties file as well.
• DATABASE_MONITORING_INTERVAL = 15
  Time interval after which the database monitoring thread check the database aliveness.
• EXPIRED_QR_CODE_REMOVAL_INTERVAL = 60
  Time interval after which the expired QR code removal thread will run its next cycle. Value 0 means the thread is inactive. Default value: 60 minutes
• hibernate.c3p0.minPoolSize = 30
  Minimum number of connections a pool will maintain at any given time for ADSS Server Core instance.
• hibernate.c3p0.maxPoolSize = 100
  Maximum number of Connections a pool will maintain at any given time for ADSS Server Core instance.
• hibernate.c3p0.maxIdleTime = 900
  Seconds a connection can remain pooled but unused before being discarded. Zero means idle connections never expire.
• hibernate.c3p0.acquireIncrement = 10
  Determines how many connections at a time c3p0 will try to acquire when the pool is exhausted
• hibernate.c3p0.checkoutTimeout = 600000
  The number of milliseconds a client calling getConnection() will wait for a connection to be checked-in or acquired when the pool is exhausted. Zero means wait indefinitely. Setting any positive value will cause the getConnection() call to time-out and break with an SQLException after the specified number of milliseconds.

For more details, follow the link: http://www.mchange.com/projects/c3p0/