Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual page 363

Be sure to enter TCP/IP port numbers that are unique on the host system.
Certificate Management System is capable of simultaneous SSL and non-SSL
communications at the end-entity port. This means that you do not have to
choose between SSL and non-SSL communications; you can use both at the
same time. But if you prefer, you can disable the non-SSL port.
To change the remote administration port, locate this line and edit the
value assigned to
<LS id="admin" ip="0.0.0.0" port="8200" security="on"
acceptorthreads="1" blocking="no">
Certificate Management System uses this port for SSL-enabled
communications with the CMS window—that is, HTTPS requests from
administrators.
To change the agent port, locate this line and edit the value assigned to
:
port
<LS id="agent" ip="0.0.0.0" port="8100" security="on"
acceptorthreads="1" blocking="no">
Certificate Management System uses this port for SSL-enabled
communications with the Agent Services interface—that is, HTTPS
requests from agents.
To change the end-entity HTTP port, locate this line and edit the value
assigned to
port
<LS id="ee_nonSSL" ip="0.0.0.0" port="80" security="off"
acceptorthreads="1" blocking="no">
Certificate Management System uses this port for non-SSL
communications with the end entity services interface. This port is
provided to allow enrollments of end entities that do not support SSL; for
example, HTTP requests from end entities such as routers. If required, you
can turn this port off by deleting the above-mentioned line from the file.
Keep in mind that if this port is enabled, end entities will be able to enroll
over HTTP too, which means their certificate requests could be intercepted
and replayed to the server.
If this CMS instance is for a Certificate Manager and if the Certificate
Manager is configured to service OCSP requests from OCSP-compliant
clients, then this port must be enabled so that OCSP-compliant clients can
successfully query the Certificate Manager for the revocation status of a
certificate. For details, see "Setting Up a Certificate Manager with OCSP
Service" on page 675.
:
port
:
Configuring Port Numbers
Chapter 11 Setting Up Ports 363