WebSphere HTTP Server - PKCS11 usb token and HTTP server

This is Interesting: Free IT Magazines  
Home > Archive > WebSphere HTTP Server > May 2005 > PKCS11 usb token and HTTP server





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author PKCS11 usb token and HTTP server
Lapo

2005-05-01, 6:30 pm

I'm trying to use an usb token as a crypto device hardware for SSL protocol
in HTTP server
so I have to do TWO steps.
1) set up SSL
2) redirect SSL encryption on the token
but I have some errors !

1) I try doing this:
------------------------------------------------------------------------------------------------
LoadModule ibm_ssl_module modules/mod_ibm_ssl.so
....
Listen 443
<VirtualHost>
SSLEnable
SSLServerCert mycert
Keyfile "promptC:/Programmi/IBM HTTP Server/key_etoken.kdb"
SSLStashfile "C:/Programmi/IBM HTTP Server/bin/mycert.passw"
</VirtualHost>
------------------------------------------------------------------------------------------------

and in the logs I have this error: [crit] SSL0104S: GSK could not
initialize, Invalid password for keyfile.

does anybody knows ?


2) use the token to perform SSL encryption. I do this:
------------------------------------------------------------------------------------------------
LoadModule ibm_ssl_module modules/mod_ibm_ssl.so
....
Listen 443
<VirtualHost>
SSLEnable
SSLServerCert eToken: mycert
SSLPKCSDriver "c:/WINDOWS/system32/eTpkcs11.dll"
SSLStashfile "C:/Programmi/IBM HTTP Server/bin/mycert.passw"
</VirtualHost>
Keyfile "promptC:/Programmi/IBM HTTP Server/key_etoken.kdb"
------------------------------------------------------------------------------------------------

but it gives me the same error... even if the password is the same for both
key store..
thanks in advance


Lapo


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com