Netscape NETSCAPE CONSOLE 6.0 - MANAGING SERVERS, Руководство пользователя

Страница: 150 / 302

modutil
150 Managing Servers with Netscape Console • December 2001
-mechanisms mechanismList
Specifies the security mechanisms for which a particular module will
be the default provider.
The
MECHANISM_LIST
is a colon-separated list of mechanism names.
Enclose this list in quotation marks if it contains spaces.
The module becomes a default provider for the listed mechanisms
when those mechanisms are enabled. If more than one module is
assigned as a mechanism’s default provider, the mechanism’s default
provider is listed as undefined.
The following mechanisms are currently available:
• RSA
• DSA
•
RC2
,
RC4
,
RC5
• DES
• DH
• FORTEZZA
• SHA1
•
MD2
,
MD5
•
RANDOM
(for random number generation)
•
FRIENDLY
(for certificates that are publicly readable).
-newpwfile newPasswordFile
Specifies a text file containing a token’s new password. This allows
automatic updating of the password when using the
-changepw
command.
-nocertdb
Instructs
modutil
to not open the certificate or key databases. This
has several effects:
• When used with the
-changepw
command, no one will be able to
set or change the password on the Netscape internal module,
because the password is stored in
key3.db
.
• When used with the
-create
command, only a
secmod.db
file
will be created;
cert7.db
and
key3.db
will not be created.
• When used with the
-jar
command, signatures on the JAR file
will not be checked.
Table 8-4 Options for modutil (Continued)
Option What the Option Does