IBM WebSphere V5.0 Security - CGISecurity

15.Select Basic Settings -> Module Sequence. This presents a list of modules
loaded by the IBM HTTP Server and should include the IBM WebSphere
AppServer module, which is probably at the top of the list. It is necessary to
add the IBM SSL module.
16.Click Add.
17.From the Select a module to add drop-down list, select
ibm_ssl(IBMModuleSSL128.dll).
18.Ensure that the Module dynamic link library is set to
modules/IBMModuleSSL128.dll.
19.Click Apply. This will add the module to the list.
20.Click Submit.
21.Every operation so far has been performed at the Global level. Now a new
VirtualHost will be created specifically for SSL connections. Select
Configuration Structure -> Create Scope.
22.Select VirtualHost from the first drop-down list.
23.Enter a fully-qualified name or IP address in the Virtual host name text area;
in our example: websrv01.itso.ibm.com.
24.Enter 443 in the Virtual host port text area.
25.Enter the server name in the Server name text area, in our case:
websrv01.itso.ibm.com.
26.For the server path, enter the path to the /htdocs directory
27.Click Submit. A new VirtualHost entry should appear in the right-hand frame.
28.Select Security -> Server Security.
29.Ensure the scope is set to Global. If not, click Scope and select Global.
30.Enable SSL by clicking Yes.
31.Enter the path and name of the key store created with the ikeyman utility.
32.Enter an SSL version 2 session ID timeout of 100.
33.Enter an SSL version 3 session ID timeout of 1000.
34.Click Submit.
35.Select Security -> Host Authorization.
36.Ensure the Scope is set to the VirtualHost defined previously: websrv01.
37.Enable SSL by clicking Yes.
38.Click Submit.
39.Restart the IBM HTTP Server. This can be performed from the command line
or by clicking the Restart Server icon in the top-right corner of the
284 IBM WebSphere V5.0 Security Handbook