IBM WebSphere V5.0 Security - CGISecurity

Testing the secure connection
To test the secure connection, use your favorite Web browser and access a Web
application on WebSphere Application Server using port 9080, for example:
https://wassrv01.itso.ibm.com:9080/itsobank
Make sure you use the https protocol, if not, the returned page will look like this:
Figure 10-45 False HTTP response
In order to test the secure connection when client side certification is required,
the right certificate with public and private key has to be imported into the
browser.
1. On the Web server machine, launch the ikeyman utility that can handle the
CMS key database file.
2. Open the keyfile for the plugin, in our example:
c:\IBMHttpServer\conf\keys\WASplugin.kdb. Provide the password when
prompted.
3. Selec the WASplugin certificate under the Personal Certificates, then click
Export.
4. Save the certificate in PKCS12 format to a file,
c:\IBMHttpServer\conf\keys\WASplugin.p12. Provide a password to secure
the PKCS12 certificate file, then in the next panel select Weak encryption
(browser compatible).
5. Close the keyfile and quit ikeyman when you are done.
6. Copy the saved WASplugin.p12 file to the client machine from which you want
to access the WebSphere server.
7. Import the PKCS12 file into your favorite browser. In Microsoft Internet
Explorer, select Tools -> Internet Options... from the menu. Switch to the
Content tab then click Certificates. Import the WASplugin.p12 certificate by
using the Import... button; provide the password for the file where necessary.
Chapter 10. Administering WebSphere security 309