JadeHttp.ini File Security

The jadehttp.dll derives a path for the jadehttp.ini, jadehttp.log, and transfer files, ensuring that they are completely secure. The directories are derived from the jadehttp.dll directory for these files, as follows.

  1. If security permits it, jadehttp attempts to create the required directories if they do not exist. The required directories, based on the example c:\jade\bin\jadehttp.dll file, are listed in the following table.

    Directory Description Example
    dll-path_dll-name\ini\ For the initialization file and the default error dll-name.htm file c:\jade\bin_jadehttp\ini\jadehttp.ini
    dll-path_dll-name\logs\ For all dll-name logs c:\jade\bin_jadehttp\logs\jadehttp.log
    dll-path_dll-name\transfer\ For the location of any temporary files created during file transfer c:\jade\bin_jadehttp\transfer\...
  2. If the initialization file option to specify the log path is set, the logs directory is not created or used.

  3. If the initialization file option to specify the transfer path is set, the transfer directory is not created or used.

  4. As the DLL can be renamed, its name is included. The DLL path therefore does not need to contain any other files, and users cannot access any of the files listed in the previous table.

For details about implementing a TCP/IP connection from the IIS to JADE applications and firewall security, see "Connecting to JADE Applications from Internet Information Server (IIS)" and "Configuring JadeHttp for Remote Connections", in Chapter 2 of the JADE Installation and Configuration Guide.