1.

How Do I Enable Tls-srp?

Answer»

TLS-SRP (Secure Remote Password key exchange for TLS, specified in RFC 5054) can supplement or replace certifi- cates in authenticating an SSL connection. To use TLS-SRP, set the SSLSRPVERIFIERFILE directive to point to an OpenSSL SRP verifier file.

To CREATE the verifier file, use the openssl TOOL:

  • openssl srp -srpvfile passwd.srpv -add username
  • After creating this file, specify it in the SSL server CONFIGURATION:
  • SSLSRPVerifierFile /path/to/passwd.srpv
  • To FORCE clients to use non-certificate TLS-SRP cipher suites, use the following directive:
  • SSLCipherSuite "!DSS:!ARSA:SRP"

TLS-SRP (Secure Remote Password key exchange for TLS, specified in RFC 5054) can supplement or replace certifi- cates in authenticating an SSL connection. To use TLS-SRP, set the SSLSRPVERIFIERFILE directive to point to an OpenSSL SRP verifier file.

To create the verifier file, use the openssl tool:


Discussion

No Comment Found

Related InterviewSolutions