SSLMAXCERTL (JANUS DEFINE parameter): Difference between revisions
m (1 revision) |
mNo edit summary |
||
| Line 15: | Line 15: | ||
The default <var>SSLMAXCERTL</var> size is 1024, which should be large enough to hold most certificates received from clients or servers. The minimum and maximum <var>SSLMAXCERTL</var> values are 256 and 32767, respectively. It is unlikely that any incoming certificate will be smaller than 512 bytes, and it is extremely unlikely that an incoming certificate will be larger than 2048 bytes. If an incoming certificate is larger than <var>SSLMAXCERTL</var>, an error message is logged to the audit trail and the connection is closed. | The default <var>SSLMAXCERTL</var> size is 1024, which should be large enough to hold most certificates received from clients or servers. The minimum and maximum <var>SSLMAXCERTL</var> values are 256 and 32767, respectively. It is unlikely that any incoming certificate will be smaller than 512 bytes, and it is extremely unlikely that an incoming certificate will be larger than 2048 bytes. If an incoming certificate is larger than <var>SSLMAXCERTL</var>, an error message is logged to the audit trail and the connection is closed. | ||
<var>SSLMAXCERTL</var> is valid for <var>OPENSERV</var>, <var>[[JANUS DEFINE#type|SRVSOCK]]</var>, CLSOCK (but not DEBUGGERCLIENT), and <var>[[JANUS DEFINE#type|WEBSERV]]</var> port types. | <var>SSLMAXCERTL</var> is valid for <var>OPENSERV</var>, <var>[[JANUS DEFINE#type|SRVSOCK]]</var>, <var>CLSOCK</var> (but not DEBUGGERCLIENT), and <var>[[JANUS DEFINE#type|WEBSERV]]</var> port types. | ||
==See also== | ==See also== | ||
<ul> | <ul> | ||
<li>[[List of Janus commands]] | <li>[[List of Janus commands]] | ||
Revision as of 19:36, 29 February 2012
<section begin="desc" />SSLMAXCERTL xxx -- bytes of storage to hold incoming certs.<section end="desc" />
SSLMAXCERTL is a parameter on JANUS DEFINE, which defines and sets characteristics of a Janus port. See the List of JANUS DEFINE parameters.
For a Janus port defined (by the SSL parameter) to support encrypted connections, this parameter indicates the number of bytes of virtual storage to be allocated to hold incoming certificates presented for authentication. Authentication verifies (or not) the certifying authority signature on the incoming certificate. Such a certificate may be:
- A server certificate sent in reply to a CLSOCK port.
- A client certificate sent in reply to a WEBSERV, SRVSOCK, OPENSERV, or SDS port that has the SSLCLCERT or SSLCLCERTR parameter in its definition.
Since incoming certificates are cached, SSLMAXCERTL bytes are allocated for each SSL session in the cache, the size of which is determined by the explicit or implicit setting of the SSLCACHE parameter.
The default SSLMAXCERTL size is 1024, which should be large enough to hold most certificates received from clients or servers. The minimum and maximum SSLMAXCERTL values are 256 and 32767, respectively. It is unlikely that any incoming certificate will be smaller than 512 bytes, and it is extremely unlikely that an incoming certificate will be larger than 2048 bytes. If an incoming certificate is larger than SSLMAXCERTL, an error message is logged to the audit trail and the connection is closed.
SSLMAXCERTL is valid for OPENSERV, SRVSOCK, CLSOCK (but not DEBUGGERCLIENT), and WEBSERV port types.