iTP Secure WebServer System Administrator's Guide (iTPWebSvr 6.0+)

Configuring the iTP Secure WebServer
iTP Secure WebServer System Administrator’s Guide523346-002
7-8
Configuring Global Session Key Caching
Use the new directive SK_GlobalCacheTimeout, to alter the default Pathsend
timeout value of 1/2 second (50/100 second). This timeout determines how long the
httpd server will wait for a response from the global cache server before a timeout
error occurs.
To enable tracing you must define the env variable TRACEFILE. All communication
from and to the httpd server is logged. This option should be set only if problems
arise. The following example of the httpd.stl.config file shows global caching
enabled.
Example 7-2. Sample httpd.stl.config File (page 1 of 2)
#VERSION=3.0
# httpd.stl.config
# Configure the required Secure Transport information
#
# Disable transmission of SSLv3 close_notify alert messages to
# Microsoft browsers.
#
Region /* {
if {[info exists HEADER(user-agent)]
&& [string match "*MSIE*" $HEADER(user-agent)]} {
DisableCloseNotify
}
}
KeyDatabase $root/conf/test_key.db
ServerPassword WebServer
AcceptSecureTransport -transport /G/ZTC0 -port 443 -cert
{CN=Test Key, OU=Testing Only, O=Tandem Computers,Inc.,
ST=California,C=US}
Region /*/ssl-sample-dir {
RequireSecureTransport
}
#
# Optional Global Session Key Cache server configuration
#
set GlobalCache OFF
#set CacheSize 1000
#set CacheExpiration 86400
if { [string match "ON" $GlobalCache] } {
SK_GlobalCache $GlobalCache