Difference between revisions of "PKI Subsystem Configuration"

From Dogtag
Jump to: navigation, search
m (References)
m (JSS Subsystem)
Line 4: Line 4:
  
 
<pre>
 
<pre>
jss._000=##
+
jss.enable=true
jss._001=## JSS
+
</pre>
jss._002=##
+
 
 +
== NSS database ==
 +
 
 +
<pre>
 
jss.configDir=[PKI_INSTANCE_PATH]/alias/
 
jss.configDir=[PKI_INSTANCE_PATH]/alias/
jss.enable=true
 
 
jss.secmodName=secmod.db
 
jss.secmodName=secmod.db
 +
</pre>
 +
 +
== OCSP ==
 +
 +
<pre>
 
jss.ocspcheck.enable=false
 
jss.ocspcheck.enable=false
 +
</pre>
 +
 +
== SSL ==
 +
 +
<pre>
 
jss.ssl.cipherfortezza=true
 
jss.ssl.cipherfortezza=true
 
jss.ssl.cipherpref=
 
jss.ssl.cipherpref=
 
jss.ssl.cipherversion=cipherdomestic
 
jss.ssl.cipherversion=cipherdomestic
 +
</pre>
 +
 +
== Secure Random ==
 +
 +
<pre>
 +
jss.secureRandom.algorithm=pkcs11prng
 +
jss.secureRandom.provider=Mozilla-JSS
 
</pre>
 
</pre>
  

Revision as of 20:24, 19 May 2017


JSS Subsystem

jss.enable=true

NSS database

jss.configDir=[PKI_INSTANCE_PATH]/alias/
jss.secmodName=secmod.db

OCSP

jss.ocspcheck.enable=false

SSL

jss.ssl.cipherfortezza=true
jss.ssl.cipherpref=
jss.ssl.cipherversion=cipherdomestic

Secure Random

jss.secureRandom.algorithm=pkcs11prng
jss.secureRandom.provider=Mozilla-JSS

References