Oracle Sun SPARC Enterprise M3000 Reference Manual page 227

■
■
■
EXTENDED
■
DESCRIPTION
■
■
■
■
■
■
If you omit the value, enclose a space in single or double quotation marks; for
example, " ".
If you include symbols or blanks in a value, enclose the value in single or double
quotation marks; for example, "Kawasaki city".
If you include a backslash or dollar mark in a value, put a backslash before the
symbol; for example, "\\" or "\$".
When the HTTPS server is enabled or there is a private certificate authority, web
server certificate, or web server secret key, a prompt to confirm execution of the
command with the specified options is displayed. Enter "y" to execute the
command or "n" to cancel the command.
The CSR is overwritten.
In case the XSCF unit is duplicated configuration, the setting automatically
reflected to the standby XSCF. When there's a defect on the standby XSCF, it
leads to an error.
When using an external certification authority, it leads to an error in the
following cases.
When the "-c gencsr" option or the "-c enable" option is executed, without
■
executing the "-c genserverkey" option.
Create the private key of the web server using the "-c genserverkey"
option.
When the "-c enable" option is executed, without executing the "-c
■
importca" option.
Import a web server certificate using the "-c importca" option.
When the web server certificate which imported by executing the "-c
■
importca" option does not correspond to the private key of the web server
which has been created by executing the "-c genserverkey" option.
Confirm the validity of the web server certificate.
The size of the file to be generated by sethttps(8) grows with total character
count typed in the operands of configuring the self-certification authority and
creating a self-signed web server certificate, and creating a CSR. If the file to be
generated is too large for XSCF, the command fails with an error. If you see this
error, reduce the number of characters in the operands and execute the
sethttps(8) command again.
When you use sethttps(8) command to disable the HTTPS service (sethttps
-c disable), the HTTPS service is disabled immediately. At this time, any
opened HTTPS sessions are terminated.
For all other settings using the sethttps(8) command, you must reboot the
XSCF using the rebootxscf(8) command for the changes to take effect.
Using the showhttps(8) command you can check the current settings in relation
to the HTTPS service.
sethttps(8)
System Administration 213