Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 376 / 866

Configuring Port Numbers
376 Netscape Certificate Management System Installation and Setup Guide • October 2001
4.
To change the end-entity port numbers, enter the port numbers in the End
Entity section.
Certificate Management System is capable of simultaneous SSL and non-SSL
communications at the end-entity port. This means that you do not have to
choose between SSL and non-SSL communications; you can use both at the
same time. But if you prefer, you can disable the non-SSL port by unchecking
the “Enable” option.
Port. Type a TCP/IP port number that is unique on the host system. Certificate
Management System uses this port for non-SSL communications with the end
entity services interface.
This port is provided to allow enrollments of end entities that do not support
SSL; for example, HTTP requests from end entities such as routers. You can use
the Enable check box to turn this port on or off. Keep in mind that if this port is
enabled, end entities will be able to enroll over HTTP too, which means their
certificate requests could be intercepted and replayed to the server.
If the CMS instance includes a Certificate Manager and if the Certificate
Manager is configured to service OCSP requests from OCSP-compliant clients,
then this port must be enabled so that OCSP-compliant clients can successfully
query the Certificate Manager for the revocation status of a certificate. For
details, see “Setting Up a Certificate Manager with OCSP Service” on page 695.
Backlog. Type the number of connections that can be waiting to be serviced at
the end entity HTTP port. The default number is 15. The number you enter in
this field is passed to the operating system’s
listen()
call.
Enable. This check box allows you to enable or disable the HTTP port.
Uncheck the option if you want to disable the port.
For issuing certificates to routers (using the CEP protocol), the port must be
enabled. For details, see Chapter 25, “Setting Up CEP Enrollment.”
SSL port. Type a TCP/IP port number. Certificate Management System uses
this port for SSL-enabled communications with the end entity services
interface (that is, HTTPS requests from end entities during certificate
enrollment, renewal, and revocation). Make sure the port number you specify
is unique on the host system.
If you don’t want end-entity interaction with a subsystem, for example, if you
don’t want end entities to interact with a Certificate Manager, you can disable
this port too (in addition to the HTTP port). See “Step 6. Enable End-Entity
Interaction” on page 539.