HP NonStop SSL User Manual

HP NonStop SSL Reference Manual Configuration • 35
Parameter Meaning
SERVKEYPASS Password for reading the (encrypted) private key file.
SLOWDOWN
Adds delay to processing resulting in slower encryption/decryption with less
CPU usage.
SOCKSHOST
SOCKSPORT
SOCKSUSER
Configure HP NonStop SSL as SOCKS Version 4 client in run modes FTPC or
PROXYC.
SRCIPADDR
SRCIPPORT
Sets the source IP address and port for an EXPANDS tunnel.
SUBNET
The name of the TCP/IP process HP NonStop SSL should listen on for
connections.
SSLCOMSECURITY Restricts the execution of SSLCOM commands.
TARGETHOST The IP address or name of the host that connections should be routed to.
TARGETINTERFACE Controls the IP address HP NonStop SSL binds to for outgoing connections.
TARGETPORT The port number that connections should route routed to.
TARGETSUBNET
The name of the TCP/IP process HP NonStop SSL should use for outgoing
connections.
TCPIPHOSTFILE Sets the DEFINE = TCPIP^HOST^FILE.
TCPIPNODEFILE Sets the DEFINE = TCPIP^NODE^FILE.
TCPIPRESOLVERNAME Sets the DEFINE = TCPIP^RESOLVER^NAME.
TCPNODELAY Activates RFC1323 on all sockets.
TRUST
When running as SSL client: list of trusted CA or server certificate files or
fingerprints.
ALLOWCERTERRORS
Use this parameter to allow selective overriding of certificate validation errors.
Parameter Syntax
ALLOWCERTERRORS number1 [, number2, ...]
Arguments
number
comma-separated list of certificate errors which HP NonStop SSL should ignore. The error numbers are defined in
the OpenSSL sources used for HP NonStop SSL (see Considerations).
Considerations
• Warning: The usage of this parameter may compromise the security of your configuration. Use only as
workaround and with care.
• The parameter can be changed at run time using SSLCOM, please see chapter "SSLCOM Command Interface"
for details.
The following table lists error numbers and names as defined in the OpenSSL sources:
Error Name Error number
X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT 2
X509_V_ERR_UNABLE_TO_GET_CRL 3
X509_V_ERR_UNABLE_TO_DECRYPT_CERT_SIGNATURE 4
X509_V_ERR_UNABLE_TO_DECRYPT_CRL_SIGNATURE 5

HP NonStop SSL Specifications

General

Brand	HP
Model	NonStop SSL
Category	Software
Language	English