Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 7 / 532

Contents vii
Creating a Certificate Trust Database ............................................................... 119
Requesting a Certificate .................................................................................... 120
Required CA Information ............................................................................. 122
Installing and Managing Certificates ................................................................ 123
Managing Certificates ................................................................................... 126
Using Secure Sockets Layer (SSL) ..................................................................... 127
Activating SSL ................................................................................................ 128
Specifying Ciphers ........................................................................................ 128
Setting Security (SSL) Preferences ................................................................ 129
Adding a PKCS #11Module .......................................................................... 129
Guidelines for Installing a PKCS#11 Module .......................................... 130
To Import a PKCS#11 Module ................................................................. 131
Using SSL Configuration File Directives ...................................................... 131
Security ..................................................................................................... 131
SSL2 ........................................................................................................... 132
SSL3 ........................................................................................................... 132
Ciphers ...................................................................................................... 132
SSL3Ciphers .............................................................................................. 133
SSL3SessionTimeout ................................................................................. 133
SSLCacheEntries ....................................................................................... 133
SSLClientAuth ........................................................................................... 133
SSLSessionTimeout ................................................................................... 133
Using Client Certificates .................................................................................... 134
Mapping Client Certificates to LDAP ........................................................... 134
Using the certmap.conf File ......................................................................... 136
Creating Custom Properties ..................................................................... 139
Example Mappings .................................................................................. 139
Changing the Trust Database/Key Pair File Password .................................... 141
Migrating Enterprise Server 3.X Certificates ..................................................... 142
Additional Server Security Considerations ....................................................... 143
Limit Physical Access .................................................................................... 143
Limit Administration Access ......................................................................... 144
Choose Good Passwords ............................................................................. 144