IHS SSL Configurations 6.1

IHS SSL Configurations 6.1 using IBM Key Management Utility


Start Key Management Utility
Create New key database along with password protections as shown in below screens

4 files will be created

1) test_cert.kdb
2) test_cert.crl
3) test_cert.rdb
4) test_cert.sth

Now Create / generate a Certificate Request

Select Personal Certificate Request and Click New Request and get the Certificate from Authorized CA and Complete the Server Certificate Request using ikeyman utility.

Step:-1) Personal Certificate Request ( Create CSR )
Step:-2) Signer Certificates ( Get CSR signed by Authorized CA and import Root CA)
Step:-3) Personal Certificates ( Import the Certificate received from CA )

imp note:-> All the signer Certificates must exists in the Key Database before completing the Certificate Request.

httpd modifications

#Enable or Load below module
LoadModule ibm_ssl_module modules/mod_ibm_ssl.so


Listen 443

ServerName mytestserver.com
DocumentRoot "D:\IBM\HTTPServer\htdocs\en_US"
SSLEnable
Keyfile "D:\IBM\HTTPServer\ssl\temp\test_cert.kdb"
SSLV2Timeout 100
SSLV3Timeout 1000

SSLDisable


Restart Http Services and Check https://mytestserver.com/

a suitable jvm could not be found. please run the program again.

getting error while installing Plugins for the IHS 6.1

Error Description:-
A suitable JVM could not be found.
Please run the program again using the option -is:javahome <Java Home Dir>

It's Resolution
To Resolve such issue start the installation using log options as given below and you will come to know that
it is searching for folder PREREQ.JDK,

install -is:javahome D:\IBM\WebSphere\AppServer\java -is:log testlogs.txt

and this is missing in plugin directroy which is downloaded from the
site is  missing folder PREREQ.JDK  Download the required files from ibm websphere site and place it in the D:\IBM\WebSphere\plugin\repository and now start the installation.

Plugins for IBM Http Server 6.1

Step by step installation guide Plugins for IHS 6.1

WebSphere 6.0 - DataSource java.sql.SQLException: java.lang.UnsupportedClassVersion

While creating MySQL JDBC Data source for WebSphere 6.0 the database connection is failing with the error of DataSource java.sql.SQLException: java.lang.UnsupportedClassVersion. Unsupported major.minor version 49.0

This is b'cos datasource is created with the mysql-connector-java-5.1.14 instead of this try the lower version connector for establishing connection with MySQL database and it is mysql-connector-java-3.1.6-bin.jar
after creating the datasource websphere application server must be restarted to load the newly loaded connecters.

Default Server Not getting install with WebSphere 4.0.4

With the default installation of WebSphere Application Server 4.0.1 there is a table which is not being created due to some Constraints of Database and this is the reason that the Default Server is not getting installed for the default server Node. Therefor create this table manually and then Restart the Server from services.

CREATE TABLE INC (
PRIMARYKEY  VARCHAR2 (64)  NOT NULL,
THEVALUE    INTEGER,
PRIMARY KEY ( PRIMARYKEY ) )

WebSphere Commerce Server - Softwares Summary

Softwares Summary for WebSphere Commerce Server

1).Database Server Oracle 9.2.0.7.0 OR 10g
2).WCS ND 6.0.25
3).WCS Commerece Installer
4).6.0.1.3 FixPack Updator
5).FixPack-1
6).Feature Pack-1
7).6.0.1.4 Update Installer
8).FixPack-2
9).Appserver Updator from 6.0.2.5 to 6.0.2.15
10).Feature Pack -2

WebSphere Console Security Implementation

access Link  was http://localhost:9060/ibm/console

Enabling Global Security for WAS IBM Console

Before this copy of these files are taken sothat we can revert back.

select GlobalSecurity
goto LocalOS Tab enter valid system user/pass and save will change the foll file
cells / wwwCell01 / security.xml

SuccessMessage:-
The settings on this panel are not validated until this registry is selected as the Active user registry on the Global Security panel and security is enabled.

Still not asking for the Password
hence goto general tab of global security and check Enable Global Security and with that Enforce Java2 security is by default get checked.
Active User Registry must be local OS

Error Note:-The Lightweight Third Party Authentication (LTPA) password is not set. Validation failed.
hence password this also set as same as local os Password Administrator/Password
Changes Done to :- cells / wwwCell01 / security.xml

After All these  Changes u will hav to Restart the DManager for the changes to take effect.

Now after Enabling the Security the Access Link is

https://localhost:9043/ibm/console/logon.jsp

Tested all the activity like Server 1 Started ok and working fine.

Synchronise IHS server logs with the System Date

Some Web servers do log file rotation, where the Web server creates a new log file after a specified period without restarting. New file names are autogenerated so they don't clash with existing files. On most systems, Web servers generate new log files every 24 hours. With a log file rotation, you can adopt an archiving
system, such as putting the log files on tape once a week, then freeing up space on the Web server.

Provide one more Parameter with the TIMEFACTOR and that is offset in our case this is 330 as our TimeZone is GMT +5:30 and OFFSET time
calculation is like 5*60 = 300 and plus 30 for the 5:30 this will rotate exactly at the system date changeover.

all this is depends upon the TIME ZONE used by the servers, in the above case i have calculated it as standard time zone for india it is GMT +5:30 and accordingly our IBM Http Server needs to be configured for loggings, virtual host directives must be modified for this its mentioned below.

<VirtualHost www.MyTestSite.com>
DocumentRoot "D:\IHS\htdocs\MyTestSite"
ServerName www.MyTestSite.com
ErrorLog "|rotatelogs logs/site_1/error_%d%m%Y.log 86400 330"
CustomLog "|rotatelogs logs/site_1/access_%d%m%Y.log 86400 330" combined
</VirtualHost>

IHS Server operations

Some IHS Server operations are listed here i know it is not difficult to manage with help utility but for easy reference its given here.

Start/Stop your server thro' the command lne params.
apache -k start -f "D:\IBM\IBM HTTP Server\conf\httpd.conf"
apache -k stop -f "D:\IBM\IBM HTTP Server\conf\httpd.conf"

This will install the Apache services  as windows nt service
apache -k install -n "IHS_1" -f "D:\IBM\IBM HTTP Server\conf\httpd.conf"
apache -k install -n "IHS_2" -f "D:\IBM\IBM HTTP Server\conf\httpd2.conf"

Note: Provide different log file names and different PID files to run both the servers simultaneously on to a single windows server.

IHS with WebSphere Application Server

IHS with WebSphere Application Server

IIS with WebSphere Application Server

Once the WebSphere Application Server 4.0 is installed successfully then it can be configured with the IIS 6.0 server by creating plugins for the same.
Load a plugin iisWASPlugin.dll

once the plugin/filter is created check its priority if it is being loaded properly then it will be with High Priority as shown below.

The next step is to create a virtual directory sePlugins with the scripts & executables permission for the created filter iisWASPlugin.

Next final step is to restart the www services and the same can be checked by using the default application's url like http://www.someserver.com/very_simple.jsp the very_simple.jsp will be served by the websphere application server which will servers the request at the port 80.