Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 631 / 866

Configuring a Certificate Manager to Publish Certificates and CRLs
Chapter 19 Setting Up LDAP Publishing 631
11.
Turn on SSL-enabled communication.
To turn on SSL-enabled communication in Directory Server:
a.
In the Directory Server window, select the Configuration tab, and then in
the right pane, select the Encryption tab.
b.
Check the Enable SSL box.
c.
In the Cipher Family section, check the RSA box.
d.
Click the Cipher Preferences button and select the appropriate SSL ciphers.
For details on individual ciphers, click the Help button.
e.
In the Token drop-down list, select the token that contains the key pair for
the certificate you installed (or for the certificate you want the server to
use).
f.
Select the certificate you want the server to use during SSL-enabled
communication with the Certificate Manager.
g.
In the Client Authentication section, select the appropriate option:
Do not allow client authentication. Select this if you want to configure the
directory for basic authentication or for SSL-based communication without
client authentication.
Allow client authentication. Select this if you want to configure the
directory for SSL client authenticated communication.
Require client authentication. Don’t select this option. If you do, Netscape
Console will not be able to communicate with Directory Server. This is
because Netscape Console does not support client-authenticated
communication yet. For example, if you’re using the same directory for
user data and configuration information of other Netscape servers and if
you configure Directory Server to require client authentication, you will no
longer be able to manage your Netscape servers from Netscape Console;
instead, you will be required to use the command-line tools.
h.
Click Save.
You are prompted to restart the server. Don’t restart the server yet; you can
restart it after you’ve made all the required changes.