52.10 SSL Switches

The Internet Agent can use SSL to enable secure SMTP, POP, IMAP, and HTTP connections. The following switches can be used to 1) specify the server certificate file, key file, and key file password required for SSL and 2) enable or disable SSL for SMTP, POP, IMAP, and HTTP connections. See Section 48.4, Securing Internet Agent Connections with SSL.

52.10.1 /certfile

Specifies the server certificate file to use. The file must be in Base64/PEM or PFX format. If the file is not in the same directory as the Internet Agent program, specify the full path.

Syntax: /certfile-filename

Example: /certfile-\\server1\sys\server1.crt

52.10.2 /keyfile

Specifies the private key file to use. The key file is required if the certificate file does not contain the key. If the certificate file contains the key, do not use this switch. When specifying a filename, use the full path if the file is not in the same directory as the Internet Agent program.

Syntax: /keyfile-filename

Example: /keyfile-\\server1\sys\server1.key

52.10.3 /keypasswd

Specifies the private key password. If the key does not require a password, do not use this switch.

Syntax: /keypasswd-password

Example: /keypasswd-novell

52.10.4 /smtpssl

Enables the Internet Agent to use a secure connection to other SMTP hosts. The SMTP host must also be enabled to use SSL or TLS (Transport Layer Security); if it is not, a non-secure connection is used. Valid settings are enabled and disabled.

Syntax: /smtpssl-setting

Example: /smtpssl-enabled

52.10.5 /httpssl

Enables the Internet Agent to use a secure connection to a Web browser being used to display the Internet Agent Web console. The Web browser must also be enabled to use SSL; if it is not, a non-secure connection is used. Valid settings are enabled and disabled.

Syntax: /httpssl-setting

Example: /httpssl-enabled

52.10.6 /popssl

Disables, enables, or requires secure (SSL) connections between POP3 clients and the Internet Agent.

Syntax: /popssl-enabled|disabled|required

Example: /popssl-required

Option

Description

enabled

The POP3 client determines whether an SSL connection or non-SSL connection is used. By default, the Internet Agent listens for SSL connections on port 995 and non-SSL connections on port 110. You can use the /popsport and /popport switches to change these ports.

required

The Internet Agent forces SSL connections on port 995 and port 110. Non-SSL connections are denied. You can use the /popsport and /popport switches to change these ports.

disabled

The Internet Agent listens for connections only on port 110, and the connections are not secure. You can use the /popport switch to change this port.

52.10.7 /imapssl

Disables, enables, or requires secure (SSL) connections between IMAP4 clients and the Internet Agent.

Syntax: /IMAP4ssl-enabled|disabled|required

Example: /popssl-required

Option

Description

enabled

The IMAP4 client determines whether an SSL connection or non-SSL connection is used. By default, the Internet Agent listens for SSL connections on port 993 and non-SSL connections on port 143. You can use the /imapsport and /imapport switches to change these ports.

required

The Internet Agent forces SSL connections on port 993 and port 143. Non-SSL connections are denied. You can use the /imapsport and /imapport switches to change these ports.

disabled

The Internet Agent listens for connections only on port 143, and the connections are not secure. You can use the /imapport switch to change this port.

52.10.8 /ldapssl

Instructs the Internet Agent to use a secure (SSL) connection with an LDAP server. For more information about why the Internet Agent would need to connect to an LDAP server, see Section 52.11, LDAP Switches

Syntax: /ldapssl