|
Home > Archive > WebSphere HTTP Server > May 2004 > Test SSL Certificate on IHS 2.0.47
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Test SSL Certificate on IHS 2.0.47
|
|
| Robert Harvey 2004-05-05, 3:33 am |
| Hello,
I have a standalone IHS 2.0.47 (no websphere) and have created a Self
Signed Certificate using iKeyman to test SSL connection to a virtual
host. In the <VirtualHost> section of the httpd.conf file I have added
directives for SSLEnable and Keyfile "C:/..../key.jks".
With SSL disabled and using http://vhost.mydomain.com I can access my
vhost website (which is as it should be). With SSL enabled and using
http://vhost.mydomain.com IE6 and netscape returns "Forbidden. You don't
have permission to access / on this server", and when I try to connect
using https://vhost.mydomain.com, IE6 returns "The page cannot be
displayed" ... "Cannot find server or DNS Error" while netscape returns
"Network error: Connection refused".
When I add Listen 443 in the Global Environment Section of the conf
file, the server won't start and Event Viewer returns error "no
listening sockets available, shutting down". If instead I add :443 port
to IP address of virtual host the server starts but Event Viewer gives
message "--mixing * ports and non-* ports with a NameVirtualHost address
is not supported, proceeding with undefind results"
This is very confusing. Can anyone shed some light on this problem or
provide a detailed process for creating a self signed certificate and
setting up SSL for a virtual host that works with IHS 2.0.47?
Thanks.
| |
| Manglu 2004-05-05, 11:33 pm |
| Robert,
Not sure if this would help anyway let me try.
Atleast till IHS 1.3.x the key files should be kdb files and not jks
files.
Not sure if that has changed in IHS 2.x.
I did a quick search on IHS Info center and it looks like it should
still be kdb
http://www-306.ibm.com/software/web...cdssl.htm#sslen
FYI: JKS files would work on the WebSPhere App Server.
HTH
Manglu
| |
| Robert Harvey 2004-05-05, 11:33 pm |
| Thanks, but this does not appear to be the answer. Older versions of IHS
didn't support JKS, but this one does. I have tried all flavours of key
file, just in case, with no result. The browser doesn't present any
certificate to the client to accept the contents.
Robert
Does anyone have SSL operating on IHS 2.0.47?
Manglu wrote:
>
> Robert,
>
> Not sure if this would help anyway let me try.
>
> Atleast till IHS 1.3.x the key files should be kdb files and not jks
> files.
>
> Not sure if that has changed in IHS 2.x.
>
> I did a quick search on IHS Info center and it looks like it should
> still be kdb
>
> http://www-306.ibm.com/software/web...cdssl.htm#sslen
>
> FYI: JKS files would work on the WebSPhere App Server.
>
> HTH
> Manglu
|
|
|
|
|