Oracle SPARC Enterprise M3000, Reference Manual

Page: 227 / 552

sethttps(8)
System Administration 213
■
If you omit the value, enclose a space in single or double quotation marks; for
example, " ".
■
If you include symbols or blanks in a value, enclose the value in single or double
quotation marks; for example, "Kawasaki city".
■
If you include a backslash or dollar mark in a value, put a backslash before the
symbol; for example, "
\\
" or "
\$
".
EXTENDED
DESCRIPTION
■
When the HTTPS server is enabled or there is a private certificate authority, web
server certificate, or web server secret key, a prompt to confirm execution of the
command with the specified options is displayed. Enter "
y
" to execute the
command or "
n
" to cancel the command.
■
The CSR is overwritten.
■
In case the XSCF unit is duplicated configuration, the setting automatically
reflected to the standby XSCF. When there's a defect on the standby XSCF, it
leads to an error.
■
When using an external certification authority, it leads to an error in the
following cases.
■
When the "
-c gencsr
" option or the "
-c enable
" option is executed, without
executing the "
-c genserverkey
" option.
Create the private key of the web server using the "
-c genserverkey
"
option.
■
When the "
-c enable
" option is executed, without executing the "
-c
importca
" option.
Import a web server certificate using the "
-c importca
" option.
■
When the web server certificate which imported by executing the "
-c
importca
" option does not correspond to the private key of the web server
which has been created by executing the "
-c genserverkey
" option.
Confirm the validity of the web server certificate.
■
The size of the file to be generated by
sethttps
(8) grows with total character
count typed in the operands of configuring the self-certification authority and
creating a self-signed web server certificate, and creating a CSR. If the file to be
generated is too large for XSCF, the command fails with an error. If you see this
error, reduce the number of characters in the operands and execute the
sethttps
(8) command again.
■
When you use
sethttps
(8) command to disable the HTTPS service (
sethttps
-c disable
), the HTTPS service is disabled immediately. At this time, any
opened HTTPS sessions are terminated.
For all other settings using the
sethttps
(8) command, you must reboot the
XSCF using the
rebootxscf
(8) command for the changes to take effect.
■
Using the
showhttps
(8) command you can check the current settings in relation
to the HTTPS service.