Red Hat NETWORK PROXY SERVER 3.7 - Manuale Utente Scaricare il pdf (Pagina 54)

44 Securing Your Server

When you use a signed certiﬁcate, you guarantee the identity of the orga-

nization running the server. For example, if thecertiﬁcate says thewebsite

is Red Hat Software’s, and the user trusts the CA, then there is no reason

to doubt that any ﬁles or programs downloaded from that site really are

from Red Hat Software, Inc.

If you upgraded from the original Red Hat Secure Web Server (version

1.0), your old key (httpsd.key)and certiﬁcate(httpsd.crt) will be lo-

catedin/etc/httpsd/conf. Movethesetwoﬁlesto /etc/httpd/conf.

Then start your secure web server as described in section 2.7 on page 40.

You should not need to get a new certiﬁcate.

Please Note:VeriSign is a very widely used CA. If you already have a

VeriSign certiﬁcate for another purpose or that you used for a different

web server software, you may have been considering using your exist-

ing VeriSign certiﬁcate with your new secure web server. However, you

are not allowed to, because VeriSign issues certiﬁcates for one particular

server software and IP address/domain name combination.

If you change either of those parameters (for example, if you previously

used anothersecureweb serverproduct and nowyou want touse the Red

Hat Secure Web Server), the VeriSign certiﬁcate you obtained to use with

the previous conﬁguration will not work with the new conﬁguration. You

will have to obtain a new VeriSign certiﬁcate.

3.1 How Server Security Works

Internet security depends upon the successful interaction and outcome

of three factors: authentication, integrity and privacy. Authentication is

when you know with certainty the identity of the person or organization

with whom you are communicating. Integrity is when the data you send

is the data thatis received(i.e., no tampering with the data occurred on its

way to its destination). Privacy is when no third party can intercept and

understand the private communication.

Your Red Hat Linux Secure Web Server provides for these factors by in-

corporating SSLeay (an implementation of SSL, the Secure Sockets Layer

protocol) into the Apacheweb server and by the use of CA-approveddig-

ital certiﬁcates. SSL handles the encrypted communications (integrity and

1 2 ... 49 50 51 52 53 54 55 56 57 58 59 ... 100 101

Nessun commento

Red Hat NETWORK PROXY SERVER 3.7 - Manuale Utente Pagina 54