Sun Oracle Crypto Accelerator 6000 Board, User Manual

Page: 217 / 266

Chapter 8 Installing and Configuring Apache Web Server Software 195
to:
2. Enable the PKCS#11 OpenSSL engine by editing the
/usr/local/apache2/conf/extra/httpd-ssl.conf
file to add the
following line:
just before the following line:
In the same file, also change the following line:
to:
This change eliminates the strong ciphers that do not work well with OpenSSL. Save
the change and exit editing.
3. Prepare a certificate request and a certificate as described in the previous
sections of this chapter.
Note – Use
/usr/bin/openssl
for the OpenSSL command,
/usr/local/apache2/conf/server.key
and
/usr/local/apache2/conf/server.crt
for the key and certificate files for
Apache 2.x.
4. Put the private key in the
/usr/local/apache2/conf/server.key
file and
the certificate in the
/usr/local/apache2/conf/server.crt
file.
5. Use the following command to start the Apache Web Server:
Include conf/extra/httpd-ssl.conf
SSLCryptoDevice pkcs11
# Pass Phrase Dialog:
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+LOW:+SSLv2:+EXP:+eNULL
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+LOW:+SSLv2:+EXP:+eNULL:
!DHE-RSA-AES256-SHA:!DHE-DSS-AES256-SHA:!AES256-SHA:!DHE-RSA-
AES128-SHA:!DHE-DSS-AES128-SHA:!RSA-AES128-SHA
% /usr/local/apache2/bin/apachectl start