User guide

Chapter 9: How to Use SSL with Interstage HTTP Server
9-8
SSLVersion 2-3
# Level of client certification
SSLVerifyClient require
# Operation control directory
SSLEnvDir d:/ssl/envdir
# Nickname of the site certificate
SSLCertName cert_for_manager
# Nickname of the client CA certificate
SSLClCACertName CACert_InfoCA
# Method of encryption
SSLCipherSuite
RC4-MD5:RC2-MD5:EXP-RC4-MD5:RSA-RC4-MD5:RSA-RC4-SHA:RSA-EXPORT-RC4-MD5
# Create access log files
CustomLog "|ihsrlog –s logs/accesslog_secure2 1 5" common
# Create error log files
ErrorLog "|ihsrlog -s logs/errorlog_secure2 1 5"
</VirtualHost>
Example
When operating SSL using the following settings:
Virtual host not using SSL:
Port number “80”, Root directory open to the public “/home/www/public”
Virtual host using SSL (without client authentication):
Port number “443”, Root directory open to the public “/home/www/secure1”
Virtual host using SSL (with client authentication):
Port number “8443”, Root directory open to the public “/home/www/secure2”
User of creating a certificate/key management environment “user1”
Group of creating a certificate/key management environment “group1”
# Add the module (Delete the comment)
AddModule mod_ihs_ssl.c
# Number of the port used for communication with a browser
Listen 80
Listen 443
Listen 8443
# User of creating a certificate/key management environment is set
User user1
# Group of creating a certificate/key management environment is set
Group group1
# Slot information directory
SSLSlotDir /home/ssl/slotdir
# Token label
SSLTokenLabel secret_key_tok
# User PIN file
SSLUserPINFile /home/ssl/upinfile