SSL Options

Accept all clients CA root certificates file Request client certificate, and verify if present | Require client certificate and verify

SSL Options

  Use this page to set options for encryption and for authentication of online entities.

  Top

Accept all clients

  Click this to allow all clients to communicate with the server without being checked for an SSL certificate.

  Top

Request client certificate, and verify if present

  Click this to request the client for a certificate, and to verify the returned certificate. If the client doesn't return a ceritficate, communication continues between the client and server. If a certificate is returned and it fails to verify, communication stops.

  If you check this, you must specify the CA root certificates file below.

  Top

Require client certificate and verify

  Click this to always require a client certificate and to verify it. This ensures that the client is trusted. If a certificate is not returned or it cannot be verified, communication between the client and server is stopped.

  If you check this, you must specify the CA root certificates file below.

  Top

CA root certificates file

  This field is mandatory if you have chosen to request or require a client certificate.

  Specify the path and filename of the file containing certificates of root CAs that you trust. This file must contain the CA root certificate of the CA that signed the client's certificate. For example, in the demoCA environment, this is CARootcert.pem in the private directory of the DemoCA area in the client system.

  Top