Chapter 4 Configuring the domain 177

2Enter the server information in the applicable fields. Table 25 describes the server SSL Settings fields.

Table 25 Server SSL Settings fields

 

Field

 

Description

 

 

 

 

 

Certificate

 

Specifies which server certificate the portal server will use.

 

 

 

You cannot specify more than one server certificate for the

 

 

 

server to use at any one time.

 

 

 

 

 

Status

 

Specifies whether SSL is enabled on the portal server. The

 

 

 

default is enabled.

 

 

 

 

 

Protocol

 

Specifies the protocol to use when establishing an SSL

 

 

 

session with a client. The options are:

 

 

 

• ssl2 — accept SSL 2.0 only

 

 

 

• ssl3 — accept SSL 3.0 and TLS 1.0

 

 

 

• ssl23 — accept SSL 2.0, SSL 3.0, and TLS 1.0

 

 

 

• tls1 — accept TLS 1.0 only

 

 

 

 

 

Ciphers

 

Specifies the cipher preference list.

 

 

 

Allows expressions that consists of cipher strings

 

 

 

separated by colons. The default cipher list is

 

 

 

ALL@STRENGTH.

 

 

 

For more information about cipher lists, see Appendix D,

 

 

 

“Supported ciphers,” on page 881.

 

 

 

 

 

Verify

 

Specifies the level of client authentication to use when

 

 

 

establishing an SSL session. The options are:

 

 

 

• none — no client certificate is required

 

 

 

• optional — a client certificate is requested, but the

 

 

 

client need not present one

 

 

 

• require — a client certificate is required

 

 

 

Not supported in Nortel Secure Network Access Switch

 

 

 

Software Release 1.0.

 

 

 

 

 

Cache Size

 

Specifies the size of the SSL cache.

 

 

 

Allows an integer less than or equal to 10000 indicating the

 

 

 

number of cached sessions. The default is 4000.

 

 

 

If there are many cache misses, increase the Cache Size

 

 

 

value for better performance.

 

 

 

 

 

Timeout

 

Specifies the maximum time to live (TTL) value for items in

 

 

 

the SSL cache. After the TTL has expired, the items are

 

 

 

discarded.

 

 

 

Allows an integer that indicates the TTL value in seconds

 

 

 

(s), minutes (m), or hours (h). If you do not specify a

 

 

 

measurement unit, seconds is assumed. The default is 5m

 

 

 

(5 minutes).

 

 

 

 

 

 

 

 

 

 

Nortel Secure Network Access Switch 4050 User Guide

Page 177
Image 177
Nortel Networks 4050 manual Server SSL Settings fields, All@Strength