
XML configuration files 121
To import these certificates, run FMSmaster > Console > Initialize [directory]. This
action imports all current certificates into a
certs directory in the Flash Media Server
installation directory.
When verifying a certificate, Flash Media Server will look for trusted root certificates in the
file specified by the
SSLCACertificateFile tag or in the directory specified by the
SSLCACertificatePath tag.
If the
SSLCACertificatePath tag is empty, Flash Media Server tries to find the root
certificate in the default
certs directory.
See also
SSLCACertificateFile
SSLCipherSuite
This tag specifies the suite of encryption ciphers that Flash Media Server uses to secure
communications.
Description
This tag is a colon-delimited list of encryption resources, such as a key exchange algorithm,
authentication method, encryption method, digest type, or one of a selected number of aliases
for common groupings. Each item in the cipher list specifies the inclusion or exclusion of an
algorithm or cipher. In addition, there are special keywords and prefixes. For example, the
keyword
"ALL" specifies all ciphers, and the prefix "!" removes the cipher from the list.
The default cipher string is:
<SSLCipherSuite>ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH</SSLCipherSuite>
The default cipher list instructs Flash Media Server to accept all ciphers, but block those using
anonymous Diffie-Hellman authentication, block low-strength ciphers, block export ciphers,
block MD5 hashing, and sort ciphers by strength from highest to lowest level of encryption.
NOTE
Contact Flash Media Server Technical Support before changing the default settings.
Commenti su questo manuale