HP XP P9000 Command View Advanced Edition Suite Software 7.6.1-00 Administrator Guide

ServerName example.com
:
Listen 23015
#Listen [::]:23015
SSLDisable
SSLSessionCacheSize 0
Listen 23016
#Listen [::]:23016
<VirtualHost *:23016>
ServerName example.com
SSLEnable
SSLProtocol SSLv3 TLSv1
SSLRequiredCiphers AES256-SHA:AES128-SHA:DES-CBC3-SHA
SSLRequireSSL
SSLCertificateFile /opt/CVXPAE/Base/httpsd/conf/ssl/server
/httpsd.pem
SSLCertificateKeyFile /opt/CVXPAE/Base/httpsd/conf/ssl/server
/httpsdkey.pem
# SSLCACertificateFile /opt/CVXPAE/Base/httpsd/conf/ssl/cacert
/anycert.pem
SSLSessionCacheTimeout 3600
</VirtualHost>
SSLCacheServerPort /opt/CVXPAE/Base/httpsd/logs/gcache_port
SSLCacheServerPath /opt/CVXPAE/Base/httpsd/sbin/gcache
SSLCacheServerRunDir /opt/CVXPAE/Base/httpsd/logs
Closing the port for the non-SSL communication (HBase Storage Mgmt Web Service)
To close the port for non-SSL communication for HBase Storage Mgmt Web Service (default: 23015)
that is used for communication in the management server, edit the httpsd.conf file, and then import
the server certificate to the truststore (jssecacerts).
Operations to complete in advance
• Checking the host name
Make sure that the host name specified for Common Name in the server certificate is the same as
the host name set to the ServerName directive at the beginning of the httpsd.conf file.
• Name resolution settings
Make sure that name resolution can be performed from the host name (the host name of the
management server) that is set to the ServerName directive at the beginning of the httpsd.conf
file to the IP address. To do this, execute the following command on the management server.
ping host-name-of-the-management-server
• Enabling SSL/TLS for Common Component
To close the port of the non-SSL communication for HBase Storage Mgmt Web Service:
1. Stop the services of the P9000 Command View AE Suite product.
Security188