IBM WebSphere V5.0 Security - CGISecurity

The new certificate should appear under the Personal tab. Close the
certificates and the options dialog.
8. In the browser, access the WebSphere application again, for example:
https://wassrv01.itso.ibm.com:9080/itsobank.
9. The browser will ask which personal certificate to use for the connection;
select the certificate, then continue the connection.
10.The Web page should come up with the right content.
Once the browser test with direct WebSphere access is successful, test the
connection through the Web server. Open a Web browser and access the Web
application using the normal port settings (port 80), for example:
http://wassrv01.itso.ibm.com/itsobank. The Web page should appear with
the right content.
10.12 SSL between the Java client and WebSphere
SSL may be used to secure a connection between two ORBs. When a Java
client invokes a method on a remote EJB, the client and server ORBs will
communicate information in the clear. SSL can protect information being passed
over the IIOP protocol in the same way that it protects information being passed
over other protocols.
In order to establish an inter-ORB connection, WebSphere demands that the
identity of the client be provided. This has no relation to the role-based security
used to protect the J2EE application, although the identity passed during the SSL
initialization sequence can be used for authorization purposes.
10.12.1 Creating the key stores
In order to secure the ORB communication, you will need to create the key file
and trust file pairs for the server and the client; you will then also need to
exchange the certificates between the two parties.
Follow the steps in 10.9, “Demo keyfile” on page 261 to create the key store and
trust store file pairs. Use the following file and keylabel names and save them in a
directory where you will find them, for example: \etc.
►
►
►
►
Server key file: ServerKeyFile.jks
Server certificate label: ServerKey
Server trust file: ServerTrustFile.jks
Client key file: ClientKeyFile.jks
310 IBM WebSphere V5.0 Security Handbook