RE: Using a Verisign certificate for SSL

Does your httpd.conf file have the following?

LoadModule ibm_ssl_module /QSYS.LIB/QHTTPSVR.LIB/QZSRVSSL.SRVPGM
SSLEngine On   
SSLAppName QIBM_HTTP_SERVER_xxxxxxxx                           
SSLCacheEnable                                                  
SSLVersion TLSV1_SSLV3                                          
SetEnv HTTPS_PORT 443      
...      
Listen ww.xx.yy.zz:443    

Where xxxxxxxx is your server instance name and ww.xx.yy.zz is the IP
address.

Also, are you accessing the site by DNS name or by IP address?  Try
accessing via the DNS name.

The above is from our config and we are using a Verisgn certificate.  We
are not, BTW, using a virtual host.

John A. Jones, CISSP
Americas Information Security Officer
Jones Lang LaSalle, Inc.
V: +1-630-455-2787 F: +1-312-601-1782
john.jones@xxxxxxxxxx

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Joe Pluta
Sent: Monday, March 27, 2006 2:14 PM
To: 'Midrange Systems Technical Discussion'
Subject: Using a Verisign certificate for SSL

Okay, I give up.  I can't get a certificate to work with the HTTP
server.  I thought I did everything I needed, but no glory.

We have a valid certificate from Verisign.  I imported it into a V5R2
machine using Digital Certificate Manager and it validates just fine.  I
enabled SSL for the HTTP server and it create an application of
QIBM_HTTP_SERVER_instance.  I assigned the certificate to that instance.
And I keep getting "Page Cannot be Displayed".

I then went through the motions of creating a virtual host.  I create a
virtual host for 10.20.30.40:443 (with the IP address being the internal
address of the iSeries).  I know I did all of that correctly, because I
pointed the virtual host to a different directory than the instance
itself, and when I go to http://10.20.30.40/ I get a different page than
http://10.20.30.40:443/.  However, if I try https://10.20.30.40/, I get
the page cannot be displayed message.

The settings (changed to protect the guilty) for the virtual host
follow:

<VirtualHost 10.20.30.40:443> 
    ServerName app.mycomp.com 
    DocumentRoot /www/appdir 
    SSLEngine Optional 
    SSLAppName QIBM_HTTP_SERVER_INSTANCE
    <Directory /www/appdir> 
         Order Allow,Deny 
         Allow From all 
    </Directory> 
     Alias /docs/ /www/appdir/
</VirtualHost>

What am I missing?

Joe


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.



This email is for the use of the intended recipient(s) only.  If you have 
received this email in error, please notify the sender immediately and then 
delete it.  If you are not the intended recipient, you must not keep, use, 
disclose, copy or distribute this email without the author's prior permission.  
We have taken precautions to minimize the risk of transmitting software 
viruses, but we advise you to carry out your own virus checks on any attachment 
to this message.  We cannot accept liability for any loss or damage caused by 
software viruses.  The information contained in this communication may be 
confidential and may be subject to the attorney-client privilege. If you are 
the intended recipient and you do not wish to receive similar electronic 
messages from us in the future then please respond to the sender to this effect.