Security settings

Setting

Description

LoadFile
SyncLoadFile

Common Security Library: Load this library if either sagd (inbound) or sslrover (outbound) need to be turned on. Both sagd and sslrover depend on sslcommon. Do not change @@ServerRoot@@ portions.

LoadModule

Security Library. Loads the inbound SSL security library. Do not change @@ServerRoot@@ portion.

AllowSecureClientConnect

Allow clients to connect to server securely (using https://). This parameter affects incoming clients only. You must have sagd.so or sagd.dll installed for this setting to have any effect.

ConnectSecureOnly

Set this directive to true to force all inbound client-to-server connections to be secure.

Sagd_CertFileName

The location of your ECC server certificate. Do not change @@ServerRoot@@ portion.

Sagd_KeyPassword

Password that protects your ECC private key.

Sagd_RSACertFileName

The location of your RSA server certificate. Do not change @@ServerRoot@@ portion.

Sagd_RSAKeyPassword

Password that protects your RSA private key.

Sagd_RandomPoolFilename

Location of random pool file used by the security software for incoming (client) secure connections. This file is created by the server, if necessary. Do not change @@ServerRoot@@ portion.

AllowHTTPSAlways

If True, allows client to get SSL pages without having a secure client to server inbound connection. You should have this set to True only if the people connecting to your server are protected by a firewall.

ServerSecuritySharedLibrary

Location of the security library used by the WebToGo conduit to talk SSL to the Web for outbound secure connections. Do not change @@ServerRoot@@ portion.

ServerCertFile

File that contains the root certificates for those Certificate Authorities that the Sync Server honors. Only used for outbound SSL connections. Do not change @@ServerRoot@@ portion.

ServerRandFile

Location of random file that is used by the security software for outbound secure connections. This file is created by the server if necessary. Choose a directory where the server has read and write permissions. Do not change @@ServerRoot@@ portion.