RE: Using a Verisign certificate for SSL

        At the very top of our web configuration file we have the
statement:

LoadModule ibm_ssl_module /QSYS.LIB/QHTTPSVR.LIB/QZSRVSSL.SRVPGM 

        Do you have that in your configuration file as well?

Guy Murphy
murphyfa@xxxxxxxx
University of Illinois Foundation 
217-333-8670


This electronic message and any attached files contain information
intended for the exclusive use of the individual or entity to whom it is
addressed and may contain information that is proprietary, privileged,
confidential and/or exempt from disclosure under applicable law. If you
are not the intended recipient, you are hereby notified that any
viewing, copying, disclosure or distribution of this information may be
subject to legal restriction or sanction and is strictly prohibited. If
you have received this communication in error, please notify the sender
by return electronic message or telephone and destroy the original
message without making any copies.


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Joe Pluta
Sent: Monday, March 27, 2006 2:14 PM
To: 'Midrange Systems Technical Discussion'
Subject: Using a Verisign certificate for SSL


Okay, I give up.  I can't get a certificate to work with the HTTP
server.  I thought I did everything I needed, but no glory.

We have a valid certificate from Verisign.  I imported it into a V5R2
machine using Digital Certificate Manager and it validates just fine.  I
enabled SSL for the HTTP server and it create an application of
QIBM_HTTP_SERVER_instance.  I assigned the certificate to that instance.
And I keep getting "Page Cannot be Displayed".

I then went through the motions of creating a virtual host.  I create a
virtual host for 10.20.30.40:443 (with the IP address being the internal
address of the iSeries).  I know I did all of that correctly, because I
pointed the virtual host to a different directory than the instance
itself, and when I go to http://10.20.30.40/ I get a different page than
http://10.20.30.40:443/.  However, if I try https://10.20.30.40/, I get
the page cannot be displayed message.

The settings (changed to protect the guilty) for the virtual host
follow:

<VirtualHost 10.20.30.40:443> 
    ServerName app.mycomp.com 
    DocumentRoot /www/appdir 
    SSLEngine Optional 
    SSLAppName QIBM_HTTP_SERVER_INSTANCE
    <Directory /www/appdir> 
         Order Allow,Deny 
         Allow From all 
    </Directory> 
     Alias /docs/ /www/appdir/ 
</VirtualHost>

What am I missing?

Joe