Technical data

The default value is 0.4,0.10,0.5. The value represents three different values separated by
commas. (Other combinations involving multiple values may be specified in the same comma
separated fashion.) The allowed values are listed below, followed by a description of each:
• 0.4 – RSA-key-exchange + RC4-128-bit encryption and MD5 (RC4-MD5)
• 0.5 – RSA-key-exchange + RC4-128-bit encryption and SHA (RC4-SHA)
• 0.10 – RSA-key-exchange + 3-DES encryption and SHA (DES-CBC3-SHA)
• 0.47* – RSA-key-exchange + 128-bit AES encryption and SHA (AES128-SHA)
• 0.55* – RSA-key-exchange + 256-bit AES encryption and SHA (AES256-SHA)
* These values are not currently supported on Windows XP or Windows Server 2003.
Requirements for Generating and Activating a Private SSL Certificate
The requirements for a private SSL certificate include:
• The certificate’s Subject Common Name (CN) must include the DNS name or IP address
configured for OSM. If you have more than one, select the most outward facing or most used
address.
• A Subject Alternative Name (SAN) is required. If used, it overrides anything in the CN, so be
sure to repeat the name in the CN in the SAN. The Subject Alternative Names should be
specified when actually signing the certificate signing request (CSR), even if this information
is already present in the CSR data fields.
The Subject Alternative Name (SAN), subjectAltName, is included in a sample config.txt
file, as shown below. You can use an ASCII text editor to create the custom configuration file
config.txt, which is used by openssl.
[ req ]
default_bits= 512
default_md= sha1
string_mask= utf8only
distinguished_name= req_DN
[ req_DN ]
C= Country Name
C_min= 2
C_max= 2
ST= State or Province Name
L= Locality Name
O= Organization Name
OU= Organization Unit Name
CN= Common Name
emailAddress = Email Address
[ verisign_CA ]
keyUsage=keyCertSign
basicConstraints= critical, CA:true , pathlen:20
subjectKeyIdentifier= hash
[ v3_req_ext_SERVER ]
subjectAltName = @alt_names_SERVER
[ alt_names_SERVER ]
DNS.1 = mynsk.mydomain.com
IP.1 = 123.1.1.23
IP.2 = 123.1.1.24
IP.3 = 123.1.1.25
IP.4 = 192.168.36.11
IP.5 = 2620:0:a05:e014:a00:111f:f001:0001
Optional OSM Configuration 23