Sun Microsystems Netscape Enterprise Server, Administrator'S Manual

Page: 132 / 532

Using Secure Sockets Layer (SSL)
132 Netscape Enterprise Server Administrator’s Guide
If
Security
is set to on, and both SSL2 and SSL3 are enabled, then the server
tries SSL3 encryption first. If that fails, the server tries SSL2 encryption. By
default, security is off.
SSL2
The
SSL2
directive tells the server whether Secure Sockets Layer, version 2
encryption is enabled or disabled. The
Security
directive dominates the
SSL2
directive; if
SSL2
encryption is enabled but the
Security
directive is
set to off, then it is as though
SSL2
were disabled.
Syntax SSL2 value
value
specifies whether SSL version 2 is enabled or disabled. Set the value
parameter to
on
to enable SSL 2 and to
off
to disable SSL 2. By default,
security is off.
SSL3
The
SSL3
directive tells the server whether Secure Sockets Layer, version 3
security is enabled or disabled. The
Security
directive dominates the
SSL3
directive; if
SSL3
security is enabled but the
Security
directive is set to off,
then it is as though
SSL3
were disabled.
Syntax SSL3 value
value
specifies whether SSL version 3 is enabled or disabled. Set the value
parameter to
on
to enable SSL 3, and to
off
to disable SSL 3. By default,
security is off.
Ciphers
The
Ciphers
directive specifies the ciphers enabled for your server.
Syntax Crc4,+rc4rc2,+rc2des,+desede3
A + means the cipher is active, and a - means the cipher is inactive. Any cipher
with
export
as part of its name is not stronger than 40 bits.