Netscape NETSCAPE DIRECTORY SERVER 6.1 - ADMINISTRATOR, Administrator'S Manual

Page: 390 / 578

Setting Security Preferences
390 Netscape Directory Server Administrator’s Guide • August 2002
When a client initiates an SSL connection with a server, the client tells the server
what ciphers it prefers to use to encrypt information. In any two-way encryption
process, both parties must use the same ciphers. There are a number of ciphers
available. Your server needs to be able to use the ciphers that will be used by client
applications connecting to the server.
Directory Server provides the following SSL 3.0 ciphers:
• RC4 cipher with 40-bit encryption and MD5 message authentication.
• RC2 cipher with 40-bit encryption and MD5 message authentication.
• No encryption, only MD5 message authentication.
• DES with 56-bit encryption and SHA message authentication.
• RC4 cipher with 128-bit encryption and MD5 message authentication.
• Triple DES with 168-bit encryption and SHA message authentication.
• FIPS DES with 56-bit encryption and SHA message authentication. This cipher
meets the FIPS 140-1 U.S. government standard for implementations of
cryptographic modules.
• FIPS Triple DES with 168-bit encryption and SHA message authentication. This
cipher meets the FIPS 140-1 US government standard for implementations of
cryptographic modules.
To select the ciphers you want the server to use:
1.
Make sure SSL is enabled for your server.
For information, see “Activating SSL,” on page 387.
2.
On the Directory Server Console, select the Configuration tab and then select
the topmost entry in the navigation tree in the left pane.
3.
Select the Encryption tab in the right pane.
This displays the current server encryption settings.
4.
Click Cipher Settings.
The Cipher Preference dialog box is displayed.
5.
In theCipher Preference dialog box, specify which ciphers you want your
server to use by selecting them from the list, and click OK.
Unless you have a security reason to not use a specific cipher, you should select
all of the ciphers, except for
none,MD5
.
6.
On the Encryption tab, click Save.