User guide

Setting SSL for Certificate/Key Management Environments Configured with the SMEE Commands
9-5
ServerName main.example.com
# Using SSL
SSLExec on
# SSL protocol version
SSLVersion 2-3
# Level of client certification (Specify “none” when operating it without the
client attestation.)
SSLVerifyClient require
# Slot information directory
SSLSlotDir d:/ssl/slotdir
# Token label
SSLTokenLabel secret_key_tok
# User PIN file
SSLUserPINFile d:/ssl/upinfile
# Operation control directory
SSLEnvDir d:/ssl/envdir
# Nickname of the site certificate
SSLCertName server_cert
# Nickname of the client CA certificate
SSLClCACertName client_cert
# Method of encryption
SSLCipherSuite
RC4-MD5:RC2-MD5:EXP-RC4-MD5:RSA-RC4-MD5:RSA-RC4-SHA:RSA-EXPORT-RC4-MD5
Example
When operating SSL using the following settings:
Port number “443”
Using SSL protocol version 3.0 or SSL protocol version 2.0
Verifies a client certificate.
Slot information directory “/home/ssl/slotdir”
Token label “secret_key_tok”
User PIN file “/home/ssl/upinfile”
Operation control directory “/home/ssl/envdir”
Nickname of the site certificate “server_cert”
Nickname of the client CA certificate “client_cert”
User of creating a certificate/key management environment “user1”
Group of creating a certificate/key management environment “group1”
# Add the module (Delete the comment)
AddModule mod_ihs_ssl.c
# Number of the port used for communication with a browser
Port 443
# Mail address of the server administrator
ServerAdmin [e-mail]