IBM WebSphere V5.0 Security - CGISecurity

order to support client authentication for IIOP requests, refer to 10.12, “SSLbetween the Java client and WebSphere” on page 310.12.The appropriate security level must be set. Valid values are low, medium andhigh. Low specifies only digital signing ciphers (no encryption), mediumspecifies only 40-bit ciphers (including digital signing), high specifies only128-bit ciphers (including digital signing).13.If the preset security level does not define the required cipher, it can bemanually added to the cipher suite option.14.Select the Cryptographic Token box if hardware or software cryptographicsupport is available. Refer to the InfoCenter for details regardingcryptographic support.15.Additional properties can be added by selecting the Custom Properties linkin the Additional Properties section.16.Click OK to apply the changes.17.If there are no errors, save the changes to the master configuration andrestart WebSphere.More details can be found on using the SSL definitions in 10.11, “SSL betweenthe Web server and WebSphere” on page 302 for HTTP requests and 10.12,“SSL between the Java client and WebSphere” on page 310 for IIOP requests.10.9 Demo keyfileSSL relies on the existence of digital certificates. A digital certificate revealsinformation about its owner, such as their identity. During the initialization of anSSL connection, the server must present its certificate to the client in order forthe client to determine the server’s identity. The client may also present theserver with its own certificate in order for the server to determine the client’sidentity. SSL is, therefore, a means for propagating identity betweencomponents.The Application Server provides a set of certificates that may be used for testingpurposes. However, the identities contained in the certificates are generic andthe expiration dates are set artificially low. This section describes the process forcreating digital certificates tailored for use in a production system.A client can trust the contents of a certificate if that certificate has been digitallysigned by a trusted third party. Certificate Authorities (CA) act as a trusted thirdparty and will signed certificates on the basis of their knowledge of the certificaterequestor.Chapter 10. Administering WebSphere security 261