How to modify smhpd.conf & smhpd.xml

[ty]

The company's security rules require some changes be made to SMH web server.  I made the changes in smhpd.conf, but my changes did not take effect.  When hpsmhd was restarted, a new smhpd.conf was generated that contained the original parameters.  Where do I make the changes so that these security reqirements can be met:

1. StartServers = 5
2. SSLProtocol = TLSv1
3. Verify that the client certificate is from an authorized CA
4. Maintain a CRL

Thanks

Tim

[Steven_181]

I am having the same requirement from out security. The smhpd.conf file get overwritten everyime smhpd is restarted.

Anyone could help ?

[Keith_C]

I found this document ... page 91 shows the SSLProtocol & SSLCiphers.

http://h20000.www2.hp.com/bc/docs/support/SupportManual/c02779581/c02779581.pdf

I used the following 2 commands to setup my cipher and disable SSLv2:

# disables SSLv2

     smhconfig -s true 

#sets up your cipher

     smhconfig -Z ALL:!aNULL:!ADH:!eNULL:!LOW:!MEDIUM:!EXP:RC4+RSA:+HIGH   

so now when looking at the smhpd.conf

# egrep "SSLPro|SSLCip" smhpd.conf
     SSLProtocol All -SSLv2
     SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!MEDIUM:!EXP:RC4+RSA:+HIGH

[ms53]

edit \hp\hpmh\conf\smhpd.xml

attrib \hp\hpmh\conf\smhpd.xml +r

no longer overwritten.