RE: How do I configure HTTPS on System i v6r1?

Ok, so the next question:

Where are the apache configs stored on System i? I'd like to copy the
current non-SSL one, make changes to the copy and try all this out.

Tom

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Porterfield, Sean
Sent: Thursday, December 13, 2012 4:11 PM
To: Midrange Systems Technical Discussion
Subject: RE: How do I configure HTTPS on System i v6r1?

I've not done it on IBM i, but Apache on other servers has redirected me to
the requested page, not just the root of the new site. One config line to
rule them all ;)

Example: http://porterfield.net/west/whois.html redirects to
http://west.porterfield.net/whois.html based on Redirect Permanent /west/
http://west.porterfield.net/

So the /west/ is matched and replaced; the rest of the URI is left and
returned.

If you wanted http://idocket.com/secure to go to https://secure.idocket.com
then you'd need another redirect entry.
--
Sean Porterfield


-----Original Message-----
From: Tom Hightower
Sent: Thursday, December 13, 2012 17:04
To: 'Midrange Systems Technical Discussion'
Subject: RE: How do I configure HTTPS on System i v6r1?

Ok, so if I create a Redirect Permant / https://idocket.com

Then a user enters this as URL: http://idocket.com

They'll be redirected to: https://idocket.com

Right?


How about if they enter: http://idocket.com/subscribe

Will they be redirected to: https://idocket.com/subscribe ?

Or do I need another Redirect Permanent config line?

TomH


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Porterfield, Sean
Sent: Thursday, December 13, 2012 3:21 PM
To: Midrange Systems Technical Discussion
Subject: RE: How do I configure HTTPS on System i v6r1?

One way to do it is change your existing configuration to use SSL then add a
new section to listen on port 80 and put in Redirect Permanent /
https://idocket.com
--
Sean Porterfield


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Tom Hightower
Sent: Thursday, December 13, 2012 15:15
To: 'Midrange Systems Technical Discussion'
Subject: RE: How do I configure HTTPS on System i v6r1?

I like the idea of using https for the whole site, it would make
configuration a lot easier, though there are A LOT of macro changes that
would need to be made. But it brings some questions:

- suppose someone enters http://idocket.com as the URL; how do I get that to
auto-route to https://idocket.com ?
-- would that be a change in our DNS host config setting, or a web server
config directive change?

TomH

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Rich Loeber
Sent: Thursday, December 13, 2012 10:59 AM
To: Midrange Systems Technical Discussion
Subject: Re: How do I configure HTTPS on System i v6r1?

Tom,

I ran into this a little while ago and slogged through it myself. I
ended
up posting a blog about the process that you might find helpful:
[1]http://www.kisco.com/ibm-i-security-tips/?p=3

Rich Loeber - @richloeber
Kisco Information Systems
[2]http://www.kisco.com


--------------------------------------------------------------------------

On 12/13/2012 11:34 AM, Tom Hightower wrote:

I have the following website, hosted on the System i:
[3]http://idocket.com

Clicking Register now on that homepage takes you to:
[4]https://secure.idocket.com/idocket/register.asp

As you can infer from the .asp, the https is hosted on a Windows server on
our internal network.

Management wants to move the https from the Windows server onto our System
I, and I'm all in on that. But it's been quite a long time (10 years?) and
many OS releases since I've done that. Can someone point me to a guide that
walks me thru getting that up and going?

Thanks,
TomH

References

Visible links
1. http://www.kisco.com/ibm-i-security-tips/?p=3
2. http://www.kisco.com/
3. http://idocket.com/
4. https://secure.idocket.com/idocket/register.asp
--


This email is confidential, intended only for the named recipient(s) above
and may contain information that is privileged. If you have received this
message in error or are not the named recipient(s), please notify the sender
immediately and delete this email message from your computer as any and all
unauthorized distribution or use of this message is strictly prohibited.
Thank you.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe,
or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.