Security
282
Netscape Enterprise Server NSAPI Programmer’s Guide • April 2002 (Draft)
•
SSLSessionTimeout
•
SSL3SessionTimeout
CRLAgeCheck
Specifies whether to shut down Enterprise Server if the age of a downloaded CRL
exceeds the time specified in its Next Update field. This condition indicates that the
CRL may not contain the most recent information available. To avoid the
possibility of users authenticating with compromised certificates that would have
been added to an up-to-date CRL, you can choose to have Enterprise Server shut
down automatically when this condition occurs.
This check is performed when the CRL is downloaded. Therefore, an already
downloaded CRL can become older than its Next Update time in the interval
between updates and still be considered valid.
This feature does not apply to CRLs that do not have a Next Update field.
Syntax
CRLAgeCheck [on|off]
Default
This directive is added to
magnus.conf
only after automatic CRL downloads are
enabled. When it is added, the default is
off
.
Example
CRLAgeCheck on
CRLFile
Specifies the download instructions for individual CRLs.
Syntax
CRLFile
URL
;
update_interval
;
max_age
\
URL
;
update_interval
;
max_age
•
The URL is the URL provided by the CA for downloading CRLs. Enterprise
Server supports CRL downloads over HTTP, HTTP over SSL, LDAP, and
LDAP over SSL.
Valid URL formats are:
❍
ldap[s]://
hostname
:
port
/
base_dn
?
attributes
?
scope
?
filter
For example:
Summary of Contents for ENTERPRISE SERVER 6.1
Page 1: ...NSAPI Programmer s Guide Netscape Enterprise Server Version6 1 April 2002 Draft...
Page 290: ...Miscellaneous 290 Netscape Enterprise Server NSAPI Programmer s Guide April 2002 Draft...
Page 318: ...cinfo 318 Netscape Enterprise Server NSAPI Programmer s Guide April 2002 Draft...
Page 336: ...Buffered Streams 336 Netscape Enterprise Server NSAPI Programmer s Guide April 2002 Draft...
Page 344: ...344 Netscape Enterprise Server NSAPI Programmer s Guide April 2002 Draft...
Page 350: ...350 Netscape Enterprise Server NSAPI Programmer s Guide April 2002 Draft...
Page 356: ...356 Netscape Enterprise Server NSAPI Programmer s Guide April 2002 Draft...