
O-4 Sample Slapd.conf File
LX Series Configuration Guide
In the following screen, HIGH means "all ciphers using key
lengths greater than 128 bits"; MEDIUM is short for "all ciphers
using key lengths equal to 128 bits", and +SSLv2:+SSL3 means
"all ciphers specified in the SSL protocol, version 2 and 3,
regardless of key strength". For a complete explanation of
OpenSSL ciphers, including all supported wild cards, see the
ciphers(1) man page.
The following settings specify the location of the Certificate
Authority (CA) certificate. Note that you must also download
this certificate to the LX using the new ldap update
commands.
The following settings specify the location of the file that
contains the SLAPD server certificate.
The following settings specify the location of the file that
contains the private key that matches the certificate stored in
TLSCertificateFile above.
The following settings must be set to either never or allow.
Please note that per RFC-2830, it is required that a valid
certificate exist on the LX.
TLSCipherSuite HIGH:MEDIUM:+SSLv2:+SSLv3
TLSCACertificateFile /usr/local/etc/openldap/cacert.pem
TLSCertificateFile /usr/local/etc/openldap/servercert.pem
TLSCertificateKeyFile /usr/local/etc/openldap/newkey.pem
TLSVerifyClient never|allow
Kommentare zu diesen Handbüchern