Tuesday, September 13, 2011

webserver

Enabling SSL between browser and webserver.
(Self-signed certificate)

 

1) Open iKeyman 
2) Create Keydatabase 
3) create a self signed certificate
4)Open the httpd.conf configuration file from the /opt/IBM/HTTPServer/conf directory, and then edit it as follows:


    

    LoadModule  ibm_ssl_module   modules/mod_ibm_ssl.so
    Listen 0.0.0.0:443
    <VirtualHost  *:443>
    ServerName  <server_name>
    #DocumentRoot C:\IBM\HTTPServer\htdocs
    SSLEnable
    #SSLClientAuth  required
    </VirtualHost>
    SSLDisable
    Keyfile "<path_to_key_file>"
    SSLStashFile "<path_to_stash_file>"


    
where <path_to_key_file> represents the file path to the KDB file and <path_to_stash_file> represents the file path to associated stash file.

For example, the paths may look like this:

         Keyfile "C:\IBM\HTTPServer\Plugins\config\<web_server>\plugin-key.kdb"
    SSLStashFile "C:\IBM\HTTPServer\Plugins\config\<web_server>\plugin-key.sth"



No comments:

Post a Comment