SSL configuration between Browser and WebServer

SSL configuration between Browser and WebServer

I. Create a key database file for IHS

      1. Start the iKeyman utility: /IHS root/bin/ikeyman.sh
      2. From the Menu Bar select Key Database File > New.
      3. Choose the key database type as CMS
      4. Enter a file name for the new Key Database file you are creating
      5. Enter a Location for the location where you want to store the .kdb file
      6. Click OK.

II. Stash the password

     1. After saving the key database file to the location specified, you are prompted to enter a password.
         This is the password that will be used to open the key database file in iKeyman in the future.
     2. Make sure checkbox Stash the password to a file is enabled. this saves the encrypted password file
         as a .sth file in the same directory as the key database file.
     3. Click OK

III. Create a self-signed certificate

    1. First, Open the KDB using ikeyman. This will show the key database contents.
    2. Click on the “down arrow” to the right, to display a list of three choices.
         Personal Certificates
         Personal Certificate Requests
         Signer Certificates
         Select Personal Certificate and click New Self-Signed.
     3. Now, a new window will pop up. here you need to input details about the certificate and your
        organization. Click OK.
     4. Select the certificate that you created now and click Extract Certificate.
         Enter the File name (.arm) and Location. Click OK.
     5. Copy this .arm file to the WebSphere Application Server machine.

IV. Configure a virtualhost on IHS to use HTTPS.

    1. Make a backup of the httpd.conf file.
    2. In the load module section, add the following line:
        LoadModule ibm_ssl_module     modules/mod_ibm_ssl.so
    3. To add virtualhost stanza to the httpd.conf file add the following lines:
  
           Listen 443
        <VirtualHost host_name.domain:443>
           ServerName host_name.domain
           SSLServerCert certificate name
           DocumentRoot “IHS_Root\docs”
           SSLEnable
           SSLClientAuth none
           Keyfile “path_to_keyfile_created”
       <\VirtualHost>

4. Start IBM HTTP Server.

===============================================================

SSL configuration between Plug-in and WebSphere Application server