IBM WebSphere V5.0 Security - CGISecurity

3. If you decide the use the IBM HTTP Server Administrative Console, log in to
the IBM HTTP Server Administrative Console as documented in 10.10.2,
“Configuring the IBM HTTP Server” on page 281.
4. Select Security -> Host Authorization from the left-side navigator.
5. Click the Scope button, and select your virtual host from the list that appears
in a new window, in our case: .
The new setting should appear next to the Scope button.
6. Change the Mode of client authentication to use to Required.
7. Submit the changes using the button at the bottom.
8. Restart the Web server.
Note: If you choose to edit the httpd.conf file manually, open it with your
favorite browser from the \conf directory, then find the SSL
configuration part. It should start with the definition of a new VirtualHost, for
example: . Find the SSLEnable
directive then insert the following directive:
SSLClientAuth required
Save the httpd.conf file, then close it and finally restart the Web server.
9. WebSphere Application Server does not support the port 443 by default; you
have to modify the default host configuration. Log in to the WebSphere
Administration Console, then select: Environment -> Virtual Hosts, then
click Default host.
10.Select Host aliases, click New, then provide the following values:
Host Name: *
Port: 443
Click OK when you are finished.
11.Save the configuration for WebSphere.
12.You have to stop and restart the server to make the changes effective.
Testing the client side certificate
The best way to test the client certificate is to use the Default Application that
ships with WebSphere and use the snoop servlet by accessing it with your Web
browser. Access the following address from the client:
https:///snoop, to determine if your browser is correctly
passing a client certificate.
296 IBM WebSphere V5.0 Security Handbook