IBM WebSphere V5.0 Security - CGISecurity

10.9.3 Using the Java keytool
Another way to create self-signed keys and certificate requests is to use the Java
keytool command line utility that comes with the Java Development Kit from Sun.
The Java keytool utility gives your more flexibility to create your own customized
certificate request with the DN (Distinguished Name) of your choice.
For more information about Java keytool, refer to the documentation at:
http://java.sun.com/j2se/1.3/docs/tooldocs/tools.html#security
10.9.4 Configuring WebSphere to use a key store
Once a key store has been configured, either by creating a self-signed certificate
or by creating a certificate request and importing the reply, WebSphere can be
configured to make use of the certificate. WebSphere will use the certificate in
order to establish a secure connection with a client via SSL.
Note: Before making changes to the sas.client.props file, it is recommended
that you make a copy for restoration purposes if the need arises.
It is necessary to define an SSL configuration, which will be used to determine
how SSL connections are established with the appropriate WebSphere
components.
Using the Administrative Console
The following steps will create a new SSL definition entry for WebSphere using
the Administrative Console; follow the steps from 10.8.1, “SSL configurations” on
page 259 using the values below:
1. Enter WASV5IntSec as the Alias.
2. Select the new WASV5IntSec link.
3. Select Secure Socket Layer (SSL).
4. Enter the location of the server's key file in the Key File Name text area:
c:\WebSphere\Appserver\etc\WASV5ServerKeyFile.jks in this example .
5. Enter the key file password in the Key File Password text area.
6. Ensure that JKS is the selected Key File Format.
7. Enter the location of the server's trust file in the Trust File Name text area, in
our case: c:\WebSphere\Appserver\etc\WASV5ServerTrustFile.jks.
8. Enter the trust file password in the Trust File Password text area.
9. Ensure that JKS is the selected Trust File Format.
276 IBM WebSphere V5.0 Security Handbook