Netscape NETSCAPE DIRECTORY SERVER 6.1 - ADMINISTRATOR, Administrator'S Manual

Page: 388 / 578

Activating SSL
388 Netscape Directory Server Administrator’s Guide • August 2002
To activate SSL communications:
1.
Set the secure port you want the server to use for SSL communications. See
“Changing Directory Server Port Numbers,” on page 37 for information.
The encrypted port number that you specify must not be the same port number
you use for normal LDAP communications. By default, the standard port
number is 389 and the secure port is 636.
2.
On the Directory Server Console, select the Configuration tab and then select
the topmost entry in the navigation tree in the left pane.
3.
Select the Encryption tab in the right pane.
The tab displays the current server encryption settings.
4.
Indicate that you want encryption enabled by selecting the “Enable SSL for this
Server” checkbox.
5.
Check the “Use this Cipher Family” checkbox.
6.
Select the certificate that you want to use from the drop-down menu.
7.
Click Cipher Settings.
The Cipher Preference dialog box is displayed.
8.
Select the checkbox next to the cipher you want to use, and click OK to save
your changes.
For more information about specific ciphers, see “Setting Security
Preferences,” on page 389.
9.
Set your preferences for client authentication.
Do not allow client authentication. With this option, the server will ignore the
client’s certificate. This does not mean that the bind will fail.
Allow client authentication. This is the default setting. With this option,
authentication is performed on the client’s request. For more information about
certificate-based authentication, see ““Using Certificate-Based
Authentication,” on page 391.
Require client authentication. With this option, the server requests
authentication from the client.
NOTE If you are using certificate-based authentication with replication,
then you must configure the consumer server to either allow or
require client authentication.