614 |
strict permissions. For more information how to generate this |
strict permissions. For more information how to generate this |
615 |
file please consult README.ssl |
file please consult README.ssl |
616 |
|
|
617 |
|
If you additonally want to check for client certificates you can |
618 |
|
use the CLIENTPEMFILE statement. In that case a connection |
619 |
|
client has to have a sufficient key and certificate in order |
620 |
|
to connect. This file also needs to have a necessary CA |
621 |
|
certificates. A configuration could look like this: |
622 |
|
|
623 |
|
set httpd port 2812 |
624 |
|
ssl enable |
625 |
|
pemfile /var/certs/monit.pem |
626 |
|
clientpemfile /var/certs/monit-client.pem |
627 |
|
|
628 |
|
|
629 |
If you only want the http server to accept connect requests to |
If you only want the http server to accept connect requests to |
630 |
one host addresses you can specify the bind address either as an |
one host addresses you can specify the bind address either as an |
631 |
IP number string or as a hostname. In this example we bind the |
IP number string or as a hostname. In this example we bind the |
868 |
ssl disable Disables ssl support for the httpd server. |
ssl disable Disables ssl support for the httpd server. |
869 |
It is equal to omitting any ssl statement. |
It is equal to omitting any ssl statement. |
870 |
pemfile Set the pemfile to be used with ssl. |
pemfile Set the pemfile to be used with ssl. |
871 |
|
clientpemfile Set the pemfile to be used when client's |
872 |
|
certificates should be checked too. |
873 |
address If specified, the http server will only |
address If specified, the http server will only |
874 |
accept connect requests to this addresses |
accept connect requests to this addresses |
875 |
This statement is an optional part of the |
This statement is an optional part of the |