IBM WebSphere V5.0 Security - CGISecurity

10.Click OK to confirm that the password has been stashed.Once the key store file has been created, the process is the same asdocumented in 10.9, “Demo keyfile” on page 261, which explains how to usethe ikeyman utility to create self-signed certificates (see 10.9.1, “Generating aself-signed certificate” on page 264) and certificate requests that should besubmitted to a CA (see 10.9.2, “Requesting a certificate signed by a CA” onpage 271).11.Once the required certificates have been generated and exported, close theikeyman utility.In addition to the key database files and the previously generated CertificateSigning Request (CSR) file, if this option was selected, the .sth suffixed file,which contains the password stash, and the .crl and .rdb files, which containinternal information specific to the CSR, should all be copied as a precautionarymeasure.10.10.2 Configuring the IBM HTTP ServerThe following section will show you how to enable security for IBM HTTP Serverusing the Administration console. You can also edit the httpd.conf file manually toenable SSL and perform other modifications.The steps described below only work for IBM HTTP Server. Other Web servershave different administration interfaces and different ways of administeringsecurity; however, the process and the to-dos should be the same for every Webserver.The httpd.conf fileThis file, located in the /conf directory, provides configurationinformation for the Web server, such as the location of specific files and modulesto be loaded. The IBM SSL module will need to be refered to in this file. This filewill have been largely configured during the installation of WebSphere and sofew changes need to be made.Note: Another file called http.conf.sample is provided in the same directorywhich contains many more configuration options than the original httpd.conffile, including a reference to the IBM SSL module. It is recommended,assuming that no changes have already been made to the original httpd.conffile, that you copy the http.conf.sample file to httpd.conf and then makechanges as required.Chapter 10. Administering WebSphere security 281