Sunday, May 18, 2008

SSL Configuration In Between Browser and Web server (IHS)

  1. Installing SSL certificate for IBM HTTP Server

  • # cd /opt/IBM/HTTPServer/bin
  • # ./ikeyman
  • create key database file i.e. keykdb save it to any folder that you want ( ssl folder)
  • it makes key.sth file also which save on same folder.
  • Create new self-signed certificate by providing Key Lable, Common Name (hostname)
  • lastly extract it on same directory (ssl)
  • exit
  • go to http.conf
  • # vi /opt/IBM/HTTPServer/conf/httpd.conf

-------->

LoadModule ibm_ssl_module modules/mod_ibm_ssl.so

#

2 -------->we are forcefully executing this

Listen 443

SSLEnable

SSLServerCert myIHSCertificate

Keyfile "/opt/IBM/HTTPServer/ssl/key.kdb"

SSLStashFile "/opt/IBM/HTTPServer/ssl/key.sth"

#

SSLDisable