User guide

Chapter 9: How to Use SSL with Interstage HTTP Server
9-6
# Server name
ServerName main.example.com
# User of creating a certificate/key management environment is set
User user1
# Group of creating a certificate/key management environment is set
Group group1
# Using SSL
SSLExec on
# SSL protocol version
SSLVersion 2-3
# Level of client certification (Specify “none” when operating it without the
client attestation.)
SSLVerifyClient require
# Slot information directory
SSLSlotDir /home/ssl/slotdir
# Token label
SSLTokenLabel secret_key_tok
# User PIN file
SSLUserPINFile /home/ssl/upinfile
# Operation control directory
SSLEnvDir /home/ssl/envdir
# Nickname of the site certificate
SSLCertName server_cert
# Nickname of the client CA certificate
SSLClCACertName client_cert
# Method of encryption
SSLCipherSuite
RC4-MD5:RC2-MD5:EXP-RC4-MD5:RSA-RC4-MD5:RSA-RC4-SHA:RSA-EXPORT-RC4-MD5
SSL Operation Using the Virtual Host Function
Example
When operating SSL using the following settings:
Virtual host not using SSL:
Port number “80”, Root directory open to the public “C:\www\public
Virtual host using SSL (without client authentication):
Port number “443”, Root directory open to the public “C:\www\secure1”
Virtual host using SSL (with client authentication):
Port number “8443”, Root directory open to the public “C:\www\secure2”
# Add the module (Delete the comment)
AddModule mod_ihs_ssl.c
# Number of the port used for communication with a browser
Listen 80
Listen 443
Listen 8443