Red Hat NETWORK PROXY SERVER 3.7 - Manuel d'utilisateur télécharger pdf (Page 36)

26 Conﬁguring Your Secure Web Server

SSLDisable directive is used to disable SSL for your non-secure

web server.

SSLEnable SSLEnable enablestheSSLprotocolengine. TheSSLEnable

directive is used to enable SSL within the virtual host tags for your

secure web server.

SSLRequireSSL SSLRequireSSL denies access to all requests unless

SSL is in use. This is a good security safeguard, since its use pro-

vides a backup in case of any conﬁguration errors that could leave

normally secure documents unprotected.

SSLCertiﬁcateFile The SSLCertificateFile states the path to your

certiﬁcate. After your certiﬁcate is created, it will be saved in

/etc/httpd/conf/httpsd.crt,

your secure web server’s SSLCertificateFile.

SSLCertiﬁcateKeyFile The SSLCertificateKeyFile states the path

to your key. After your key is created,it will be saved in

/etc/httpd/conf/httpsd.key,

your secure web server’s SSLCertificateKeyFile.

SSLCACertiﬁcateFile The SSLCACertificateFile namesaﬁle where

your secure web server keeps all of the certiﬁcates (public keys) for

all of the CAs with which it interacts. This ﬁle is used for client au-

thentication. Your secure web server’s SSLCACertificateFile is

/etc/ssl/ca-cert-bundle.pem.

SSLVerifyClient SSLVerifyClient sets a level of required veriﬁcation

for client authentication. By default, your secure web server’s

SSLVerifyClient is set to none, meaning that it doesn’t require

client authentication.

SSLLogFile The SSLLogFile provides a place for any error messages

generated by SSL. Most of these error messages will be duplicated

in your secure web server’s “real” error log. By default, your secure

web server’s SSL-speciﬁc error log is

/var/log/httpd/sslstat log.

1 2 ... 31 32 33 34 35 36 37 38 39 40 41 ... 100 101

Pas de commentaire

Red Hat NETWORK PROXY SERVER 3.7 - Manuel d'utilisateur Page 36