iTP Secure WebServer System Administrator's Guide (iTPWebSvr 6.0+)
Configuration Directives
iTP Secure WebServer System Administrator’s Guide—523346-002
A-9
SCF TCP/IP Configuration
-requestauth
-requireauth
Use the -requestauth option to challenge the web client for authentication. This
option only requests the web client to authenticate; it does not require that the web
client do so. The RequireSecureTransport -auth command in a Region directive
forbids access without authentication.
Use the -requireauth option to challenge the web client for authentication
credentials. The connection is aborted if the web client does not authenticate.
You may specify either or neither of the -requestauth or -requireauth
options. The default is neither.
You can specify any number of AcceptSecureTransport directives in the iTP
Secure WebServer configuration file. Omit this directive if you do not require secure
transport; in that case, use the Accept directive instead.
SCF TCP/IP Configuration
To associate multiple IP addresses with a single TCP/IP process, use the SCF ALTER
SUBNET command with the ADDALIAS parameter, as shown in the example below:
SCF> ALTER SUBNET $ZTC0.#SN1, ADDALIAS 120.1.1.12, &
SCF> SUBNETMASK %hFFFF0000
This command adds the IP address 120.1.1.12 to the subnet $ZTC0.#SN1. The
SUBNETMASK parameter is required. Each IP address must be added by using a
separate ALTER SUBNET command.
You can use the DELETEALIAS parameter to delete IP addresses that have been
added to a subnet using the ADDALIAS parameter as shown below:
SCF> ALTER SUBNET $ZTC0.#SN1, DELETEALIAS 120.1.1.12
Each IP address must be deleted by using a separate ALTER SUBNET
command.
SSL 3.0 Connection is
refused.
Error messages are
logged to the error
and extended log
files.
Connection is
allowed.
Negotiated protocol
will be SSL 3.0.
HTTPS_
PROTOCOL_
VERSION
is set to 3.
Connection is
allowed.
Negotiated protocol
will be SSL 3.0.
HTTPS_
PROTOCOL_
VERSION
is set to 3.
Table A-3. WebServer Actions Based on SSL Version (page 2 of 2)
Client-Hello
Message
Configuration:
SSL 2.0 Only
(-nosslv3)
Configuration:
SSL 3.0 Only
(-nosslv2)
Configuration:
Both SSL 2.0
and SSL 3.0