/
OpenNCP properties

OpenNCP properties

Following is a list of the OpenNCP properties that are used during its operation. The values provided are just examples and should be replaced according to each country's configuration.

KeyValuePurpose
13069500379061044841 (<cert_serial_number>)NCPB__eu_NCP (<alias>)Serial number and alias for certificates fetched by TSL-Sync
COUNTRY_CODEPTCountry code according to ISO 3166-1 alpha-2 (see e.g. Wikipedia for a list of possible values)
COUNTRY_NAMEPortugalName of country according to ISO 3166-1 alpha-2 (see e.g. Wikipedia for a list of possible values)
LANGUAGE_CODEpt-PTLanguage code according to ISO 639x
HOME_COMM_ID2.16.17.710.820.1000.990.1Participating Nation OID (used in Portal for patient consent submission, Protocol Terminators and eADC)
COUNTRY_PRINCIPAL_SUBDIVISIONPT-1ISO 3166-2 code for country subdivision (used in Portal, Protocol Terminators, TRC-STS and epSOS Web Portal for audit purposes)
TRUSTSTORE_PATH/opt/epsos-configuration/cert/PPT/keystore/truststore.jksPath to truststore
TRUSTSTORE_PASSWORDchangeitTruststore password
SP_KEYSTORE_PATH/opt/epsos-configuration/cert/PPT/keystore/servprov.jksPath to Service Provider keystore
SP_KEYSTORE_PASSWORDchangeitService Provider keystore password
SP_PRIVATEKEY_ALIASSP-pk-aliasService Provider private key alias
SP_PRIVATEKEY_PASSWORDchangeitService Provider private key password
SC_KEYSTORE_PATH/opt/epsos-configuration/cert/PPT/keystore/servcons.jksPath to Service Consumer keystore
SC_KEYSTORE_PASSWORDchangeitService Consumer keystore password
SC_PRIVATEKEY_ALIASSC-pk-aliasService Consumer private key alias
SC_PRIVATEKEY_PASSWORDchangeitService Consumer private key password
NCP_SIG_KEYSTORE_PATH/opt/epsos-configuration/cert/PPT/keystore/ncpsign.jksPath to NCP Signature keystore
NCP_SIG_KEYSTORE_PASSWORDchangeitNCP Signature keystore password
NCP_SIG_PRIVATEKEY_ALIASNcp-sig-pk-aliasNCP Signature private key alias
NCP_SIG_PRIVATEKEY_PASSWORDchangeitNCP Signature private key password
secman.sts.urlhttp://192.192.192.192:8080/epsos-trc-sts/STSServiceServiceTRC-STS URL
automated.validationTRUEThis will call the XDStarClient online validator to validate messages
SERVER_IP192.192.192.192IP address of the machine running OpenNCP
audit.repository.port2862OpenATNA's TLS Server port
audit.repository.urllocalhostOpenATNA's Server location
audit.time.to.try200Timeout value (milliseconds) for sending audit message
auditrep.forcewriteTRUEForce AuditManager to write audit message
WRITE_TEST_AUDITSTRUEDetermines if test audits should be written
TEST_AUDITS_PATH/opt/epsos-configuration/audits/Path where test audits will be written
ncp.countryPTLocal NCP infos (used for audit purposes) – country code
ncp.emailadmin@ncp.ptLocal NCP infos (used for audit purposes) – NCP administrator email
scheduled.time.between.failed.logs.handling.minutes60Interval (minutes) in which OpenATNA checks if some audit log was not persisted. In case these logs are found, they will be attempted to re-persist.
<countryCode>.tsam.synchronizer.lastsyncdate4/11/15 03:41 AMDate of last TSAM-Synchronization
certificates.storepath/opt/epsos-configuration/cert/PPT/certs/Path to folder where the other countries certificates will be stored
ncp.countrieslu,at,ch,grYou'll connect to the Central Services to fetch configuration and certificates from each one of these countries
tsl.location.<CC>https://ecrtsppt.conet-services.de:8445/NCP_Service_Status_List__COUNTRY_<CC>_.xmlLocation of the TSL file for each country
APP_BEHIND_PROXYTRUEProxy configurations (to use in case your OpenNCP is running behind a proxy)
APP_PROXY_HOST192.192.4.5Proxy configurations (to use in case your OpenNCP is running behind a proxy)
APP_PROXY_PORT8080Proxy configurations (to use in case your OpenNCP is running behind a proxy)
APP_PROXY_USERNAMEproxyuserProxy configurations (to use in case your OpenNCP is running behind a proxy)
APP_PROXY_PASSWORDproxypassProxy configurations (to use in case your OpenNCP is running behind a proxy)
<CC>.ConsentService.WSEhttps://172.31.64.14:8443/epsos-ncp-server/services/XDR_Service/URL for ConsentService of country <CC>
<CC>.OrderService.WSEhttps://172.31.64.14:8443/epsos-ncp-server/services/XCA_Service/URL for OrderService of country <CC>
<CC>.PatientIdentificationService.WSEhttps://172.31.64.14:8443/epsos-ncp-server/services/XCPD_Service/URL for PatientIdentificationService of country <CC>
<CC>.PatientService.WSEhttps://172.31.64.14:8443/epsos-ncp-server/services/XCA_Service/URL for PatientService of country <CC>
<CC>.VPNGateway.WSE172.31.64.14Hostname or IP address of VPN gateway of country <CC>
<CC>.DispensationService.WSEhttps://172.31.64.14:8443/epsos-ncp-server/services/XDR_Service/URL for DispensationService of country <CC>
PORTAL_ADMIN_PERMISSIONSPRD-006,PRD-003,PRD-004,PRD-005,PRD-010,PRD-016,PPD-032,PPD-033Portal Administrator permissions (epSOS EED SAML Binding)
PORTAL_CHECK_PERMISSIONSFALSE(? Check user permissions ?)
PORTAL_CLIENT_CONNECTOR_URLhttp://localhost:8080/epsos-client-connector/services/ClientConnectorServiceURL of the web service exposed by epsos-client-connector to allow communication with the Portal
PORTAL_CONSENT_ENABLEDTRUE(? Activate Portal option to provide consent document ?)
PORTAL_CONSENT_OID2.16.17.710.820.1000.990.1(? OID sent in Consent Submission ?)
PORTAL_CUSTODIAN_NAME<CountryCustodianName>(? Name of organization ?)
PORTAL_CUSTODIAN_OID2.16.17.710.820.1000.990.1(? Organization OID ?)
PORTAL_DISPENSATION_COUNTRY<CountryCode>Country code according to ISO 3166-1 alpha-2 (see e.g. Wikipedia for a list of possible values)
PORTAL_DISPENSATION_OID2.16.17.710.820.1000.990.1(? OID of dispensation country ?)
PORTAL_DOCTOR_OID2.16.17.710.820.1000.990.1(? Doctor OID ?)
PORTAL_DOCTOR_PERMISSIONSPRD-006,PRD-003,PRD-004,PRD-005,PRD-010,PRD-016,PPD-032,PPD-033Portal Doctor permissions (epSOS EED SAML Binding)
PORTAL_ENTRY_OID2.16.17.710.820.1000.990.1(? Organization OID ?)
PORTAL_HOSPITAL_OID2.16.17.710.820.1000.990.1(? Hospital OID ?)
PORTAL_LEGAL_AUTHENTICATOR_CITY<City>(? Legal Authenticator City ?)
PORTAL_LEGAL_AUTHENTICATOR_FIRSTNAME<LegalAuthenticatorFirstname>(? Legal Authenticator Firstname ?)
PORTAL_LEGAL_AUTHENTICATOR_LASTNAME<LegalAuthenticatorLastname>(? Legal Authenticator Lasttname ?)
PORTAL_LEGAL_AUTHENTICATOR_ORG_OID2.16.17.710.820.1000.990.1(? Legal Authenticator Organization OID ?)
PORTAL_LEGAL_AUTHENTICATOR_PERSON_OID2.16.17.710.820.1000.990.1(? Legal Authenticator Personal OID ?)
PORTAL_LEGAL_AUTHENTICATOR_POSTALCODEN/A(? Legal Authenticator Postal Code ?)
PORTAL_NURSE_PERMISSIONSPRD-006,PRD-004,PRD-010Portal Nurse permissions (epSOS EED SAML Binding)
PORTAL_ORDER_OID2.16.17.710.820.1000.990.1(? OID of ordering country ?)
PORTAL_PATIENTS_OID2.16.17.710.820.1000.990.1(? Patients OID ?)
PORTAL_PATIENT_PERMISSIONSPRD-006,PRD-003,PRD-004,PRD-005,PRD-010,PRD-016,PPD-032,PPD-033Portal Patient permissions (epSOS EED SAML Binding)
PORTAL_PHARMACIES_OID2.16.17.710.820.1000.990.1(? Pharmacies OID ?)
PORTAL_PHARMACIST_OID2.16.17.710.820.1000.990.1(? Pharmacist OID ?)
PORTAL_PHARMACIST_PERMISSIONSPRD-006,PRD-004,PRD-010,PPD-046Portal Pharmacist permissions (epSOS EED SAML Binding)
PORTAL_PROPERTIES_UPDATEDTRUE(? True if Portal properties were updated by Portal Configuration Portlet ?)
PORTAL_TEST_ASSERTIONSFALSE(?)
secman.cert.validator.checkforkeyusageFALSE(? Determines if Security Manager validates certificate key usage extension ?)
secman.digest.algorithm.defaulthttp://www.w3.org/2000/09/xmldsig#sha1Security Manager digest algorithm
secman.signature.algorithm.defaulthttp://www.w3.org/2001/04/xmldsig-more#rsa-sha256Security Manager signature algorithm
secman.sts.checkHostnameFALSE(? Verify hostname when requesting assertion from TRC-STS ?)

Related content

OpenNCP Specifications
OpenNCP Specifications
More like this
Technical Requirements List for OpenNCP and integration design
Technical Requirements List for OpenNCP and integration design
More like this
Create epSOS Certificates
Create epSOS Certificates
More like this
OpenNCP Installation
OpenNCP Installation
More like this
Setup eADC in OpenNCP
Setup eADC in OpenNCP
More like this
Assessment on the OpenNCP Installation guide completeness
Assessment on the OpenNCP Installation guide completeness
More like this