Enable SSL support
To encrypt the connection between a
P4 Broker
and its end users, your broker must have a valid private key and
certificate pair in the directory specified by its P4SSLDIR
environment variable. Certificate and key generation and management for
the broker works the same as it does for the
P4 Server. The users'
P4 Server
applications must be configured to trust the fingerprint of the
broker.
To encrypt the connection between a
P4 Broker
and a
P4 Server, your broker
must be configured to trust the fingerprint of the
P4 Server. Therefore, the user that runs p4broker must:
-
Use the
p4 trustcommand to create aP4TRUSTfile that recognizes the fingerprint of the P4 Server. -
Set
P4TRUSTto specify the path to theP4TRUSTfile becauseP4TRUSTcannot be specified in the broker configuration file.
For more information about enabling SSL for the broker, see the Perforce Support Center on Enabling SSL Support for the Server/Broker/Proxy.