OpenNCP properties

Owned by Joao Cunha
Last updated: Jun 02, 2016
3 min read

Following is a list of the OpenNCP properties that are used during its operation. The values provided are just examples and should be replaced according to each country's configuration.

KeyValuePurpose
13069500379061044841 (<cert_serial_number>)NCPB__eu_NCP (<alias>)Serial number and alias for certificates fetched by TSL-Sync
COUNTRY_CODEPTCountry code according to ISO 3166-1 alpha-2 (see e.g. Wikipedia for a list of possible values)
COUNTRY_NAMEPortugalName of country according to ISO 3166-1 alpha-2 (see e.g. Wikipedia for a list of possible values)
LANGUAGE_CODEpt-PTLanguage code according to ISO 639x
HOME_COMM_ID2.16.17.710.820.1000.990.1Participating Nation OID (used in Portal for patient consent submission, Protocol Terminators and eADC)
COUNTRY_PRINCIPAL_SUBDIVISIONPT-1ISO 3166-2 code for country subdivision (used in Portal, Protocol Terminators, TRC-STS and epSOS Web Portal for audit purposes)
TRUSTSTORE_PATH/opt/epsos-configuration/cert/PPT/keystore/truststore.jksPath to truststore
TRUSTSTORE_PASSWORDchangeitTruststore password
SP_KEYSTORE_PATH/opt/epsos-configuration/cert/PPT/keystore/servprov.jksPath to Service Provider keystore
SP_KEYSTORE_PASSWORDchangeitService Provider keystore password
SP_PRIVATEKEY_ALIASSP-pk-aliasService Provider private key alias
SP_PRIVATEKEY_PASSWORDchangeitService Provider private key password
SC_KEYSTORE_PATH/opt/epsos-configuration/cert/PPT/keystore/servcons.jksPath to Service Consumer keystore
SC_KEYSTORE_PASSWORDchangeitService Consumer keystore password
SC_PRIVATEKEY_ALIASSC-pk-aliasService Consumer private key alias
SC_PRIVATEKEY_PASSWORDchangeitService Consumer private key password
NCP_SIG_KEYSTORE_PATH/opt/epsos-configuration/cert/PPT/keystore/ncpsign.jksPath to NCP Signature keystore
NCP_SIG_KEYSTORE_PASSWORDchangeitNCP Signature keystore password
NCP_SIG_PRIVATEKEY_ALIASNcp-sig-pk-aliasNCP Signature private key alias
NCP_SIG_PRIVATEKEY_PASSWORDchangeitNCP Signature private key password
secman.sts.urlhttp://192.192.192.192:8080/epsos-trc-sts/STSServiceServiceTRC-STS URL
automated.validationTRUEThis will call the XDStarClient online validator to validate messages
SERVER_IP192.192.192.192IP address of the machine running OpenNCP
audit.repository.port2862OpenATNA's TLS Server port
audit.repository.urllocalhostOpenATNA's Server location
audit.time.to.try200Timeout value (milliseconds) for sending audit message
auditrep.forcewriteTRUEForce AuditManager to write audit message
WRITE_TEST_AUDITSTRUEDetermines if test audits should be written
TEST_AUDITS_PATH/opt/epsos-configuration/audits/Path where test audits will be written
ncp.countryPTLocal NCP infos (used for audit purposes) – country code
ncp.emailadmin@ncp.ptLocal NCP infos (used for audit purposes) – NCP administrator email
scheduled.time.between.failed.logs.handling.minutes60Interval (minutes) in which OpenATNA checks if some audit log was not persisted. In case these logs are found, they will be attempted to re-persist.
<countryCode>.tsam.synchronizer.lastsyncdate4/11/15 03:41 AMDate of last TSAM-Synchronization
certificates.storepath/opt/epsos-configuration/cert/PPT/certs/Path to folder where the other countries certificates will be stored
ncp.countrieslu,at,ch,grYou'll connect to the Central Services to fetch configuration and certificates from each one of these countries
tsl.location.<CC>https://ecrtsppt.conet-services.de:8445/NCP_Service_Status_List__COUNTRY_<CC>_.xmlLocation of the TSL file for each country
APP_BEHIND_PROXYTRUEProxy configurations (to use in case your OpenNCP is running behind a proxy)
APP_PROXY_HOST192.192.4.5Proxy configurations (to use in case your OpenNCP is running behind a proxy)
APP_PROXY_PORT8080Proxy configurations (to use in case your OpenNCP is running behind a proxy)
APP_PROXY_USERNAMEproxyuserProxy configurations (to use in case your OpenNCP is running behind a proxy)
APP_PROXY_PASSWORDproxypassProxy configurations (to use in case your OpenNCP is running behind a proxy)
<CC>.ConsentService.WSEhttps://172.31.64.14:8443/epsos-ncp-server/services/XDR_Service/URL for ConsentService of country <CC>
<CC>.OrderService.WSEhttps://172.31.64.14:8443/epsos-ncp-server/services/XCA_Service/URL for OrderService of country <CC>
<CC>.PatientIdentificationService.WSEhttps://172.31.64.14:8443/epsos-ncp-server/services/XCPD_Service/URL for PatientIdentificationService of country <CC>
<CC>.PatientService.WSEhttps://172.31.64.14:8443/epsos-ncp-server/services/XCA_Service/URL for PatientService of country <CC>
<CC>.VPNGateway.WSE172.31.64.14Hostname or IP address of VPN gateway of country <CC>
<CC>.DispensationService.WSEhttps://172.31.64.14:8443/epsos-ncp-server/services/XDR_Service/URL for DispensationService of country <CC>
PORTAL_ADMIN_PERMISSIONSPRD-006,PRD-003,PRD-004,PRD-005,PRD-010,PRD-016,PPD-032,PPD-033Portal Administrator permissions (epSOS EED SAML Binding)
PORTAL_CHECK_PERMISSIONSFALSE(? Check user permissions ?)
PORTAL_CLIENT_CONNECTOR_URLhttp://localhost:8080/epsos-client-connector/services/ClientConnectorServiceURL of the web service exposed by epsos-client-connector to allow communication with the Portal
PORTAL_CONSENT_ENABLEDTRUE(? Activate Portal option to provide consent document ?)
PORTAL_CONSENT_OID2.16.17.710.820.1000.990.1(? OID sent in Consent Submission ?)
PORTAL_CUSTODIAN_NAME<CountryCustodianName>(? Name of organization ?)
PORTAL_CUSTODIAN_OID2.16.17.710.820.1000.990.1(? Organization OID ?)
PORTAL_DISPENSATION_COUNTRY<CountryCode>Country code according to ISO 3166-1 alpha-2 (see e.g. Wikipedia for a list of possible values)
PORTAL_DISPENSATION_OID2.16.17.710.820.1000.990.1(? OID of dispensation country ?)
PORTAL_DOCTOR_OID2.16.17.710.820.1000.990.1(? Doctor OID ?)
PORTAL_DOCTOR_PERMISSIONSPRD-006,PRD-003,PRD-004,PRD-005,PRD-010,PRD-016,PPD-032,PPD-033Portal Doctor permissions (epSOS EED SAML Binding)
PORTAL_ENTRY_OID2.16.17.710.820.1000.990.1(? Organization OID ?)
PORTAL_HOSPITAL_OID2.16.17.710.820.1000.990.1(? Hospital OID ?)
PORTAL_LEGAL_AUTHENTICATOR_CITY<City>(? Legal Authenticator City ?)
PORTAL_LEGAL_AUTHENTICATOR_FIRSTNAME<LegalAuthenticatorFirstname>(? Legal Authenticator Firstname ?)
PORTAL_LEGAL_AUTHENTICATOR_LASTNAME<LegalAuthenticatorLastname>(? Legal Authenticator Lasttname ?)
PORTAL_LEGAL_AUTHENTICATOR_ORG_OID2.16.17.710.820.1000.990.1(? Legal Authenticator Organization OID ?)
PORTAL_LEGAL_AUTHENTICATOR_PERSON_OID2.16.17.710.820.1000.990.1(? Legal Authenticator Personal OID ?)
PORTAL_LEGAL_AUTHENTICATOR_POSTALCODEN/A(? Legal Authenticator Postal Code ?)
PORTAL_NURSE_PERMISSIONSPRD-006,PRD-004,PRD-010Portal Nurse permissions (epSOS EED SAML Binding)
PORTAL_ORDER_OID2.16.17.710.820.1000.990.1(? OID of ordering country ?)
PORTAL_PATIENTS_OID2.16.17.710.820.1000.990.1(? Patients OID ?)
PORTAL_PATIENT_PERMISSIONSPRD-006,PRD-003,PRD-004,PRD-005,PRD-010,PRD-016,PPD-032,PPD-033Portal Patient permissions (epSOS EED SAML Binding)
PORTAL_PHARMACIES_OID2.16.17.710.820.1000.990.1(? Pharmacies OID ?)
PORTAL_PHARMACIST_OID2.16.17.710.820.1000.990.1(? Pharmacist OID ?)
PORTAL_PHARMACIST_PERMISSIONSPRD-006,PRD-004,PRD-010,PPD-046Portal Pharmacist permissions (epSOS EED SAML Binding)
PORTAL_PROPERTIES_UPDATEDTRUE(? True if Portal properties were updated by Portal Configuration Portlet ?)
PORTAL_TEST_ASSERTIONSFALSE(?)
secman.cert.validator.checkforkeyusageFALSE(? Determines if Security Manager validates certificate key usage extension ?)
secman.digest.algorithm.defaulthttp://www.w3.org/2000/09/xmldsig#sha1Security Manager digest algorithm
secman.signature.algorithm.defaulthttp://www.w3.org/2001/04/xmldsig-more#rsa-sha256Security Manager signature algorithm
secman.sts.checkHostnameFALSE(? Verify hostname when requesting assertion from TRC-STS ?)