Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 133 / 532

Chapter 5, Working with Server Security 133
Using Secure Sockets Layer (SSL)
SSL3Ciphers
The
SSL3Ciphers
directive specifies which SSL 3 ciphers are enabled for your
server.
Syntax
SSL3Ciphers
+rsa_rc4_1rsa_3drsa_drsa_rc4_40_m
d5,+rsa_rc2_40_md5,-rsa_null_md5
,+rsa_des_rsa_rc4_56_sha
A +
means the cipher is active, and
a -
means the cipher is inactive. Any
cipher with
40
as part of its name is 40 bits.
SSL3SessionTimeout
The SSL3SessionTimeout directive controls SSL3 session caching.
Syntax SSL3SessionTimeout
seconds
seconds
is the number of seconds until a cached SSL3 session becomes
invalid. The default value is 86400 (24 hours). If the
SSL3SessionTimeout
directive is specified, the value of seconds is silently constrained to be between
5 and 86400 seconds.
SSLCacheEntries
Specifies the number of SSL sessions that can be cached.
SSLClientAuth
The
SSLClientAuth
directive specifies whether a client must have a
certificate in order to communicate with the server. You don’t need to turn on
this directive to use client authentication with access control.
Syntax SSLClientAuth
value
value
specifies if certificates are always required. Set the value parameter to
on
to require certificates, and to
off
to specify that certificates are not
required.
SSLSessionTimeout
The SSLSessionTimeout directive controls SSL2 session caching.