Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION 11-05-2007, Installation Manual

Page: 255 / 982

Syntax:
http_server.ssl_client_verification = option
Description Option
Specifies the same functionality as the Optional option; however,
previously unknown client certificates that pass HTTP authenti- autoupdate
cation are added to a trust store so that subsequent client connec-
tions with the same certificate do not require HTTP authentica-
tion.
Disables client certificate checking. disabled
This is the default setting.
Allows a trusted certificate to be authenticated (no HTTP authen-
tication is necessary). optional
Also allows an untrusted certificate to pass the SSL handshake
if the client passes the HTTP authentication.
Requires a trusted certificate for the SSL handshake to succeed. required
Example
http_server.ssl_client_verification = disabled
http_server.ssl_trust_store
Purpose
Specifies a directory containing the OpenSSL trust store.
Syntax
http_server.ssl_trust_store = path
The following is the default path for the trust store file.
OpenWBEM 237