Versions Compared

Old Version 23

changes.mady.by.user AntonA

Saved on

compared with

New Version Current

changes.mady.by.user Andrei Bakhteev (Unlicensed)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Warning

Since FIX Antenna C++/.NET version 2.13.0 and FIXEdge version, 5.9.0 SSL built-in support has been introduced. Refer to How to configure built-in SSL support for FIX session sessions in FIXEdge for details. However, you can continue use stunnel with accordance to the current article if you wish.

...

Download latest version of the installer from https://www.stunnel.org/downloads.html

Run the installer and answer questions to generate a certificate.

Configuration example #1. FIXEdge's initiator connects to SSL acceptor over Stunnel

...

  1. Run stunnel GUI Start from Start menu Run  

  2. Editstunnel.conf from stunnel system tray icon context menu

    Add option 
    Code Blocktitlestunnel

    .

    conf
    protocol = proxy
  3. Comment example SSL services
    4. Add

    Add a new SSL service

    Code Block
    titlestunnel.conf
    [fix_initiator_session1_tunnel]
client = yes
accept  = 127.0.0.1:443
connect = <counterparty_ip>:443

    <counterparty_ip> - ip address of counterparty

  4. Reload stunnel.conf from stunnel system tray icon context menu

...

  1. Open FIXEdge.properties to specify Initiator FIX session parameters:

    Initiator FIX session

    Code Block
    title FIXEdge.properties
    FixLayer.FixEngine.Session.SSLInitiator.Role = Initiator
FixLayer.FixEngine.Session.SSLInitiator.Host = 127.0.0.1
FixLayer.FixEngine.Session.SSLInitiator.Port = 443
    Info

    See Additional properties for SSL configuration also

  2. Connect to VPN (if necessary; if not, just skip this step);

  3. Start FIXEdge.

Configuration example #2. FIXEdge is a proxy between 2 counterparties.

...

Info

The next configuration parameters are used in the configuration examples:

<exchange_ip> - Exchange's IP

<FIXEdge_ip> - FIXEdge IP

TCP port for SSL Connections on FIXEdge site: 443

TCP port for SSL Connections on Exchange site: 443

FIXEdge ListenPort from engine.properties: 8901

Configuration on FIXEdge side

FIXEdge.properties

Configured 2 sessions FIXEdge has two configured sessions: EXCHANGE and CLIENT

Code Block
languageperl
titleFIXEdge.properties
FixLayer.FixEngine.Sessions = EXCHANGE, CLIENT
# -----------------[ FIXEdge connects to EXCHANGE as Initiator ] ------------------
FixLayer.FixEngine.Session.EXCHANGE.Role = Initiator
FixLayer.FixEngine.Session.EXCHANGE.HBI = 30
FixLayer.FixEngine.Session.EXCHANGE.Host = 127.0.0.1
FixLayer.FixEngine.Session.EXCHANGE.Port = 444
FixLayer.FixEngine.Session.EXCHANGE.Version = FIX44
FixLayer.FixEngine.Session.EXCHANGE.SenderCompID = FIXEDGE
FixLayer.FixEngine.Session.EXCHANGE.TargetCompID = EXCHANGE
# ... the rest parameters for EXCHANGE

# ----------------- [ FIXEdge awaitsaccepts connection from the CLIENT] ----------FixLayer.FixEngine.Session.EXCHANGE.Role
= Initiator
FixLayer.FixEngine.Session.CLIENT.Role = Acceptor
FixLayer.FixEngine.Session.CLIENT.Version = FIX44
FixLayer.FixEngine.Session.CLIENT.SenderCompID = FIXEDGE
FixLayer.FixEngine.Session.CLIENT.TargetCompID = CLIENT
# ... the rest parameters for CLIENT


Info

See Additional properties for SSL configuration also

BL_Config.xml

Simple routing configuration

...

Code Block
SenderCompID = Client
TargetCompID = FIXEDGE
Remote host = 127.0.0.1
Remote port = 444

FIXEdge uses Windows certificate store for connection to an Exchange.

  1. Import the certificate to windows certificate with a certutil tool

    Code Block
    certutil -addstore -user -f "My" <filename>.crt

  2. Configure Windows Certificate store in Stunnel

    Code Block
    titlestunnel.conf
    engine = capi

    and configure tunnel for the session requiring SSL Connection

    Code Block
    titlestunnel.conf
    [Exchange SSL connection]
client = yes
engineId = capi
accept = 127.0.0.1:8443
connect = <exchange ip>:<exchange port>

    <exchange ip> - Enchange connection IP
    <exchange port> - Enchange connection port

  3. Configure Initiator session in FIXEdge.properties

    Code Block
    titleFIXEdge.properties
    FixLayer.FixEngine.Session.EXCHANGE.Version = FIX44
FixLayer.FixEngine.Session.EXCHANGE.Role = Initiator
FixLayer.FixEngine.Session.EXCHANGE.SenderCompID = FIXEDGE
FixLayer.FixEngine.Session.EXCHANGE.TargetCompID = EXCHANGE
FixLayer.FixEngine.Session.EXCHANGE.Host = 127.0.0.1
FixLayer.FixEngine.Session.EXCHANGE.Port = 8443
FixLayer.FixEngine.Session.EXCHANGE.HBI = 30
FixLayer.FixEngine.Session.EXCHANGE.RecreateOnLogout = true
    Info

    See Additional properties for SSL configuration also