HP NonStop SSL, Справочное руководство, Страница: 71 / 127

HP NonStop SSL Reference Manual Configuration
•
71
The second possible value for ROUTINGMODE is "D" which stands for dynamic routing. In that case the first network
packet sent to HP NonStop SSL needs to contain the destination IP address and port on the NonStop system in dotted
decimal notation, preceded by a "D" and followed by a binary zero.
For IPv6 the additional parameter DYNAMICROUTINGENABLEIPV6 has to be set to TRUE. This will change the
expected separator between the IP address and the port to be a pipe symbol ( '|' ) which then has to be used for both IPv4
and IPv6 connections.
Example:
D10.0.0.198:8888<binary zero>
or, if DYNAMICROUTINGENABLEIPV6 is set to TRUE:
D10.0.0.198|8888<binary zero>
respectively
Dfe80:abcd::4711|8888<binary zero>
In this case the address will be taken as the target to which the connection shall be forwarded. This dynamic routing
feature is only needed in really rare cases, so usually there is no need to touch this parameter.
Parameter Syntax
ROUTINGMODE S | D
Arguments:
S
Static routing is used
D
Dynamic routing is used
Default
If omitted, "S" is used and HP NonStop SSL will use static routing.
Example
ROUTINGMODE D
SERVCERT
Use this parameter to specify the server certificate HP NonStop SSL should use to authenticate itself to an SSL client.
Parameter Syntax
SERVCERT file
Arguments
file
Guardian file name of a DER encoded X.509 server certificate.
Default
If omitted, HP NonStop SSL will search for a file "SERVCERT" on the default subvolume.
Example
SERVCERT $DATA1.SSL.MYCERT
Considerations