IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Integer
value
indicating
the
maximum
number
of
concurrent
entries
in
the
SSL
cache.
The
minimum
value
is
zero
(0)
which
means
that
caching
is
unlimited.
Entries
between
0
and
256
are
set
to
256.
There
is
no
maximum
limit.
This
stanza
entry
is
optional.
When
the
stanza
entry
is
not
assigned
a
value,
WebSEAL
uses
a
default
value
of
0.
The
WebSEAL
configuration
utility,
however,
assigns
a
default
value
of
4096.
Example:
ssl-max-entries
=
4096
See
also
the
IBM
Tivoli
Access
Manager
for
e-business
Performance
Tuning
Guide.
gsk-crl-cache-size
=
number_of_entries
Integer
value
indicating
the
maximum
number
of
entries
in
the
GSKit
CRL
cache.
Minimum
value
is
0.
A
value
of
0
means
that
no
entries
are
cached.
Neither
WebSEAL
nor
GSKit
impose
a
maximum
value
on
this
cache.
See
the
discussion
on
maximum
values
for
integers
in
“Guidelines
for
configuring
stanzas”
on
page
378.
See
the
Secure
Socket
Layer
Introduction
and
iKeyman
User’s
Guide
for
more
information
on
GSKit.
See
also
the
standards
documents
for
SSL
V3
and
TLS
V1
(RFC
2246)
for
more
information
on
CRLs.
This
stanza
entry
is
required.
Default
value:
0
Example:
gsk-crl-cache-size
=
0
gsk-crl-cache-entry-lifetime
=
number_of_seconds
Integer
value
specifying
the
lifetime
timeout,
in
seconds,
for
individual
entries
in
the
GSKit
CRL
cache.
The
minimum
value
is
0.
The
maximum
value
is
86400.
Neither
WebSEAL
nor
GSKit
impose
a
maximum
value
on
the
cache
entry
lifetime.
See
the
discussion
on
maximum
values
for
integers
in
“Guidelines
for
configuring
stanzas”
on
page
378.
See
the
Secure
Socket
Layer
Introduction
and
iKeyman
User’s
Guide
for
more
information
on
GSKit.
See
also
the
standards
documents
for
SSL
V3
and
TLS
V1
(RFC
2246)
for
more
information
on
CRLs.
This
stanza
entry
is
required.
Default
value:
0
Example:
gsk-crl-cache-entry-lifetime
=
0
crl-ldap-server
=
server_name
Name
of
the
LDAP
server
to
be
referenced
for
Certificate
Revocation
List
(CRL)
checking
during
SSL
authentication.
This
stanza
entry
is
optional.
There
is
no
default
value.
Example:
crl-ldap-server
=
surf.santacruz.ibm.com
crl-ldap-server-port
=
port_number
Appendix
A.
WebSEAL
configuration
file
reference
409