MRV Communications LX-4000 Series Technical Information Seite 659

  • Herunterladen
  • Zu meinen Handbüchern hinzufügen
  • Drucken
  • Seite
    / 692
  • Inhaltsverzeichnis
  • FEHLERBEHEBUNG
  • LESEZEICHEN
  • Bewertet. / 5. Basierend auf Kundenbewertungen
Seitenansicht 658
O-4 Sample Slapd.conf File
LX Series Configuration Guide
In the following screen, HIGH means "all ciphers using key
lengths greater than 128 bits"; MEDIUM is short for "all ciphers
using key lengths equal to 128 bits", and +SSLv2:+SSL3 means
"all ciphers specified in the SSL protocol, version 2 and 3,
regardless of key strength". For a complete explanation of
OpenSSL ciphers, including all supported wild cards, see the
ciphers(1) man page.
The following settings specify the location of the Certificate
Authority (CA) certificate. Note that you must also download
this certificate to the LX using the new ldap update
commands.
The following settings specify the location of the file that
contains the SLAPD server certificate.
The following settings specify the location of the file that
contains the private key that matches the certificate stored in
TLSCertificateFile above.
The following settings must be set to either never or allow.
Please note that per RFC-2830, it is required that a valid
certificate exist on the LX.
TLSCipherSuite HIGH:MEDIUM:+SSLv2:+SSLv3
TLSCACertificateFile /usr/local/etc/openldap/cacert.pem
TLSCertificateFile /usr/local/etc/openldap/servercert.pem
TLSCertificateKeyFile /usr/local/etc/openldap/newkey.pem
TLSVerifyClient never|allow
Seitenansicht 658
1 2 ... 654 655 656 657 658 659 660 661 662 663 664 ... 691 692

Kommentare zu diesen Handbüchern

Keine Kommentare