Netscape ENTERPRISE SERVER 6.1, Manual

Page: 76 / 373

PathCheck Stage
76 Netscape Enterprise Server NSAPI Programmer’s Guide • April 2002 (Draft)
Parameters
Examples
ssl-check
Applicable in
PathCheck
-class directives.
If a restriction is selected that is not consistent with the current cipher settings
under Security Preferences, this function opens a popup dialog which warns that
ciphers with larger secret keysizes need to be enabled. This function is designed to
be used together with a Client tag to limit access of certain directories to
non-exportable browsers.
The function returns
REQ_NOACTION
if SSL is not enabled, or if the
secret-keysize
parameter is not specified. If the secret keysize for the current session is less than
the specified
secret-keysize
and the
bong-file
parameter is not specified, the
function returns
REQ_ABORTED
with a status of
PROTOCOL_FORBIDDEN
. If the bong
file is specified, the function returns
REQ_PROCEED
, and the
path
variable is set to
the bong filename. Also, when a keysize restriction is not met, the SSL session
cache entry for the current session is invalidated, so that a full SSL handshake will
occur the next time the same client connects to the server.
Requests that use
ssl-check
are not cacheable in the accelerator file cache if
ssl-check
returns something other than
REQ_NOACTION
.
Parameters
virtual-index
is the URI of the content generator that acts as an index for the
URI the user enters.
from
(optional) is a comma-separated list of URIs for which this
virtual-index
is applicable. If
from
is not specified, the
virtual-index
always applies.
bucket
optional, common to all
obj.conf
functions
# MyLWApp is a LiveWire application
PathCheck fn=set-virtual-index virtual-index=MyLWApp
secret-keysize
(optional) is the minimum number of bits required in the
secret key.