Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 131 / 532

Chapter 5, Working with Server Security 131
Using Secure Sockets Layer (SSL)
To tell the server to start with that server certificate instead, you must edit
magnus.conf
and add the following line anywhere in the file:
CERTDefaultNicknae $TOKENNAME:Server-Cert
To find out what value to use for
$TOKENNAME
, go to the server’s Security tab
and select the Manage Certificates link. When you log in to the external module
where Server-Cert is stored, its certificates are displayed in the list in the
$TOKENNAME:$NICKNAME
form.
To Import a PKCS#11 Module
To import a PKCS#11 module, perform the following steps:
1.
Access the Enterprise Administration Server and choose the Security tab.
2.
Click the Add PKCS#11 Module link.
3.
Type the path for the .jar file in Path to Jar File.
4.
Click OK.
For information on using PKCS#11, see “The Install a New PKCS#11 Module
Page,” in the online help.
Using SSL Configuration File Directives
Installing an SSL-enabled server creates directive entries in the
magnus.conf
file (the server’s main configuration file). These directives are briefly described
in the following sections.
Security
The
Security
tells the server whether encryption (Secure Sockets Layer
version 2 or version 3 or both) is enabled or disabled.
Syntax Security
value
value
specifies if SSL is on or off. Set the value parameter to
on
to enable SSL;
and to
off
to disable SSL.