Configuring Secure Socket Layers

Detailed information about SSL and setting up and configuring your SSL security environment is contained in the Sun Internet Mail Server 3.5 Administrator's Guide, in the Chapter entitled "Security and Authentication."

Additionally, you can access the following web site for more information about SSL: http://home.netscape.com/assist/security. The following section describes how to modify the SSL Key Package, using command-line utilities, after you have set up your SSL environment. Before using these commands, refer to Chapter 7 of the Sun Internet Mail Server 3.5 Administrator's Guide in the sections entitled "Creating the SSL Environment," and "Creating a Self-Signed Certificate."

To Delete a Key Package

# keypkg -D -h -L ip_address

This command deletes the server's key package and certificate from the naming service.

To Delete the Root CA Key Package

1.

As root on the local root CA machine, type:

# keypkg -D -k skirca

---

Note - If you delete the local root CA key package, any certificates signed by this local root CA will no longer work.

---

To Change a Key Pair or Distinguished Name for a Certificate

You cannot change the key pair or DN for an existing certificate. If you want to change either of these, you will need to delete the entire key package and then regenerate it.

To Change a Password for a Key Package

As root, type:

# keypkg -P -h -L ip_address

You need to enter the old password for the key package, then the new password twice.

To Change the Local Root CA's Password

% keypkg -P

You need to enter the old password for the key package, then the new password twice.