iTP Secure WebServer System Administrators Guide (Version 7.5+)

• Client authentication in SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2.
The server can request or require a Web client to authenticate itself and can restrict access
based on client-authentication information by using region commands or CGI variables.
• Digest access authentication
Provides a challenge/response authentication mechanism for additional security; the user's
password is not sent over the network.
• Certificate chains
The iTP Secure WebServer uses the SSL 3.0 and TLS protocol to enable you to send certificate
chains to and from clients. By using certificate chains, you can establish a certificate hierarchy
that is more than two certificates deep.
• Support for security certificates with non-English characters
iTP Secure WebServer supports security certificates with UTF8 encoded DN (Distinguished
Name) strings. With this feature customers can use security certificates, which contain
non-English characters in the DN.
• Session tracking and authentication
The iTP Secure WebServer includes built-in support for ticketing, a technique for user-session
tracking. The iTP Secure WebServer issues anonymous tickets.
• Virtual hosts
The iTP Secure WebServer supports multiple domains within a single instance of the iTP Secure
WebServer, including the ability to return customized content based on the destination domain
name. Several configuration directives and configuration directives options (for example,
Region) are provided to support this capability (for example, Accept).
• Built-in clickable images
You can create image maps for clickable images, enabling users to easily navigate to other
pages.
• National Center for Supercomputing Applications (NCSA) format in image maps
The iTP Secure WebServer supports NCSA-formatted image-map files in addition to the CERN
format. The iTP Secure WebServer also provides support for the point directive in
NCSA-formatted image maps.
• Byte-range protocol
The iTP Secure WebServer supports the proposed Byte Range Retrieval Extension to HTTP.
This means, for example, that the iTP Secure WebServer can send Adobe Portable Document
Format (PDF) documents one page at a time, rather than an entire document at once, to users
of the Adobe Acrobat Reader version 3.0 or later. This method permits high-quality PDF
documents to be displayed like HTML documents.
• Content encoding (compression) types
This feature enables the iTP Secure WebServer to return the proper encoding type for
compressed files.
• Administration server
The iTP Secure WebServer Administration Server provides a Web-browser interface for defining
the iTP Secure WebServer configuration, starting and stopping the iTP Secure WebServer,
and monitoring noteworthy events such as errors.
28 Introduction to the iTP Secure WebServer