IBM WebSphere V5.0 Security - CGISecurity

10.Click OK to confirm that the password has been stashed.
Once the key store file has been created, the process is the same as
documented in 10.9, “Demo keyfile” on page 261, which explains how to use
the ikeyman utility to create self-signed certificates (see 10.9.1, “Generating a
self-signed certificate” on page 264) and certificate requests that should be
submitted to a CA (see 10.9.2, “Requesting a certificate signed by a CA” on
page 271).
11.Once the required certificates have been generated and exported, close the
ikeyman utility.
In addition to the key database files and the previously generated Certificate
Signing Request (CSR) file, if this option was selected, the .sth suffixed file,
which contains the password stash, and the .crl and .rdb files, which contain
internal information specific to the CSR, should all be copied as a precautionary
measure.
10.10.2 Configuring the IBM HTTP Server
The following section will show you how to enable security for IBM HTTP Server
using the Administration console. You can also edit the httpd.conf file manually to
enable SSL and perform other modifications.
The steps described below only work for IBM HTTP Server. Other Web servers
have different administration interfaces and different ways of administering
security; however, the process and the to-dos should be the same for every Web
server.
The httpd.conf file
This file, located in the /conf directory, provides configuration
information for the Web server, such as the location of specific files and modules
to be loaded. The IBM SSL module will need to be refered to in this file. This file
will have been largely configured during the installation of WebSphere and so
few changes need to be made.
Note: Another file called http.conf.sample is provided in the same directory
which contains many more configuration options than the original httpd.conf
file, including a reference to the IBM SSL module. It is recommended,
assuming that no changes have already been made to the original httpd.conf
file, that you copy the http.conf.sample file to httpd.conf and then make
changes as required.
Chapter 10. Administering WebSphere security 281