6 Netscape Enterprise Server Administrator’s Guide • August 2002
Chapter 5 SecuringYourEnterpriseServer ...................................... 87
RequiringAuthentication ............................................................... 88
UsingCertificatesforAuthentication................................................... 88
ServerAuthentication ............................................................. 88
ClientAuthentication.............................................................. 88
VirtualServerCertificates.......................................................... 89
CreatingaTrustDatabase ............................................................... 89
CreatingaTrustDatabase.......................................................... 89
Usingpassword.conf................................................................. 90
StartanSSL-enabledServerAutomatically ........................................... 91
Requesting and Installing a VeriSign Certificate ............................................ 91
RequestingaVeriSignCertificate ...................................................... 91
Installing a VeriSign Certificate . . . . . ................................................... 92
Requesting and Installing Other Server Certificates . ........................................ 92
RequiredCAInformation............................................................. 93
RequestingOtherServerCertificates ................................................... 94
Installing Other Server Certificates . . ................................................... 96
Installing a Certificate . . . .......................................................... 97
MigratingCertificatesWhenYouUpgrade ................................................ 98
MigratingaCertificate............................................................. 98
UsingtheBuilt-inRootCertificateModule .............................................. 99
ManagingCertificates ................................................................. 100
Installing and Managing CRLs and CKLs . . . . . . ........................................... 101
Installing a Local CRL or CKL . . . . . . .................................................. 101
ManagingLocalCRLsandCKLs ..................................................... 102
ConfiguringRemoteCRLs.............................................................. 103
ConfiguringAutomatic/RemoteCRLDownloads ...................................... 103
ReducingtheSSL3/TLSSessionCacheTimeout ..................................... 106
SettingSecurityPreferences ............................................................ 107
SSLandTLSProtocols .............................................................. 108
UsingSSLtoCommunicatewithLDAP ............................................... 108
EnablingSecurityforConnectionGroups .............................................. 109
TurningSecurityOn ............................................................. 109
SelectingaServerCertificateforaConnectionGroup ................................. 110
SelectingCiphers ................................................................ 111
ConfiguringSecurityGlobally........................................................ 113
SSLSessionTimeout .............................................................. 114
SSLCacheEntries................................................................. 114
SSL3SessionTimeout ............................................................. 114
UsingExternalEncryptionModules ..................................................... 114
Installing the PKCS#11 Module . . . . . .................................................. 115
UsingmodutiltoInstallaPKCS#11Module ......................................... 115
Usingpk12util................................................................... 116
