Global Site Certificates; Overview - HP P4518A - Traffic Management Server Sa7150 User Manual
Hp e-commerce/xml server accelerator sa7150 - user guide
Hide thumbs
Also See for P4518A - Traffic Management Server Sa7150:
- Release notes (4 pages) ,
- Warranty and support information (12 pages)
Table of Contents
Advertisement
C H A P T E R 3
Global Site
Certificates
SSL Operations
3. Create a server mapping. Use the create map command to
specify the server IP address, ports, and keyID.
HP SA7150> create map
Server IP (0.0.0.0): 10.1.1.30
SSL (network) port [443]:
Cleartext (server) port [80]:
KeyID to use for mapping: mywebserver
4. Save the configuration when the server has been mapped.
HP SA7150> config save
Saving configuration to flash...
Configuration saved to flash
HP SA7150>
Overview
Four types of certificates are involved in the following discussion:
Root Certificate. The certificate of a trusted Certificate Authority
•
(CA) such as VeriSign*.
•
Server Certificate. Loaded on the server. Can be either self-
generated or received from a certificate authority such as
VeriSign*. Interacts with requesting browser's root certificate to
establish encryption level.
•
Global Site Certificate. An extended server certificate. Allows
128-bit encryption for export-restricted browsers.
•
Intermediate CA certificate. A certificate "signed," that is,
authenticated, by a recognized CA such as VeriSign*, and used to
validate a global site certificate. Called an "intermediate CA
certificate" in the following discussion.
Export versions of Internet Explorer* and Netscape* Communicator
use 40-bit encryption to initiate connections to SSL servers. Upon
receiving a client request, the server responds by sending a digital
certificate. If this certificate is a conventional server certificate (that
is, not a global site certificate), browser and server complete the SSL
handshake and use a 40-bit key to encrypt application data. If the
server responds to a requesting browser with a global site certificate,
the client automatically renegotiates the connection to use 128-bit
encryption.
A global site certificate is validated by an accompanying intermediate
CA certificate. (Such pairs are called "chained certificates.")
Examples of intermediate CA certificates include Microsoft SGC
41
Advertisement
Table of Contents
