× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.


  1.  Home
  2. MIDRANGE-L
  3. December 2012

Re: How do I configure HTTPS on IBM i 6.1?

Tom

You might consider using the browser interface - http://your-IBM-i-host-name-or-IP-address:2001

You'll need a fairly high authorization, and you might get redirected.

Also, the *ADMIN instance of the HTTP server has to be running. STRTCPSVR *HTTP HTTPSVR(*ADMIN)

It might be possible to copy an existing instance - I forget, have never done that.

The browser interface can be a bit daunting, but there is all kinds of good help text there.

Brad's point is well-taken - the default for where the Apache stuff is held is under /www in the IFS, with your server instance name under that. But this doesn't need to be the case, it's just typical. I'd look there first, for httpd.conf, as Larry suggested, then look where Brad suggested.

HTH
Vern

On 12/14/2012 8:38 AM, Bradley Stone wrote:
Not necessarily.

First find the instance name, then look in the instance source for the
location of the configuration file.

QUSRSYS/QATMHINSTC member name of the instance name. That will contain
information for the location of the configuration file.


On Thu, Dec 13, 2012 at 9:08 PM, DrFranken <midrange@xxxxxxxxxxxx> wrote:

OK That's an easy one. /www/<servername>/conf/httd.conf

- DrFranken
On 12/13/2012 5:42 PM, Tom Hightower wrote:
Ok, so the next question:

Where are the apache configs stored on IBM i? I'd like to copy the
current non-SSL one, make changes to the copy and try all this out.

Tom

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Porterfield, Sean
Sent: Thursday, December 13, 2012 4:11 PM
To: Midrange Systems Technical Discussion
Subject: RE: How do I configure HTTPS on System i v6r1?

I've not done it on IBM i, but Apache on other servers has redirected me
to
the requested page, not just the root of the new site. One config line
to
rule them all ;)

Example: http://porterfield.net/west/whois.html redirects to
http://west.porterfield.net/whois.html based on Redirect Permanent
/west/
http://west.porterfield.net/

So the /west/ is matched and replaced; the rest of the URI is left and
returned.

If you wanted http://idocket.com/secure to go to
https://secure.idocket.com
then you'd need another redirect entry.
--
Sean Porterfield


-----Original Message-----
From: Tom Hightower
Sent: Thursday, December 13, 2012 17:04
To: 'Midrange Systems Technical Discussion'
Subject: RE: How do I configure HTTPS on System i v6r1?

Ok, so if I create a Redirect Permant / https://idocket.com

Then a user enters this as URL: http://idocket.com

They'll be redirected to: https://idocket.com

Right?


How about if they enter: http://idocket.com/subscribe

Will they be redirected to: https://idocket.com/subscribe ?

Or do I need another Redirect Permanent config line?

TomH


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Porterfield, Sean
Sent: Thursday, December 13, 2012 3:21 PM
To: Midrange Systems Technical Discussion
Subject: RE: How do I configure HTTPS on System i v6r1?

One way to do it is change your existing configuration to use SSL then
add a
new section to listen on port 80 and put in Redirect Permanent /
https://idocket.com
--
Sean Porterfield


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Tom Hightower
Sent: Thursday, December 13, 2012 15:15
To: 'Midrange Systems Technical Discussion'
Subject: RE: How do I configure HTTPS on System i v6r1?

I like the idea of using https for the whole site, it would make
configuration a lot easier, though there are A LOT of macro changes that
would need to be made. But it brings some questions:

- suppose someone enters http://idocket.com as the URL; how do I get
that to
auto-route to https://idocket.com ?
-- would that be a change in our DNS host config setting, or a web server
config directive change?

TomH

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Rich Loeber
Sent: Thursday, December 13, 2012 10:59 AM
To: Midrange Systems Technical Discussion
Subject: Re: How do I configure HTTPS on System i v6r1?

Tom,

I ran into this a little while ago and slogged through it myself. I
ended
up posting a blog about the process that you might find helpful:
[1]http://www.kisco.com/ibm-i-security-tips/?p=3

Rich Loeber - @richloeber
Kisco Information Systems
[2]http://www.kisco.com



--------------------------------------------------------------------------
On 12/13/2012 11:34 AM, Tom Hightower wrote:

I have the following website, hosted on the System i:
[3]http://idocket.com

Clicking Register now on that homepage takes you to:
[4]https://secure.idocket.com/idocket/register.asp

As you can infer from the .asp, the https is hosted on a Windows
server on
our internal network.

Management wants to move the https from the Windows server onto our
System
I, and I'm all in on that. But it's been quite a long time (10 years?)
and
many OS releases since I've done that. Can someone point me to a guide
that
walks me thru getting that up and going?

Thanks,
TomH

References

Visible links
1. http://www.kisco.com/ibm-i-security-tips/?p=3
2. http://www.kisco.com/
3. http://idocket.com/
4. https://secure.idocket.com/idocket/register.asp
--


This email is confidential, intended only for the named recipient(s)
above
and may contain information that is privileged. If you have received
this
message in error or are not the named recipient(s), please notify the
sender
immediately and delete this email message from your computer as any and
all
unauthorized distribution or use of this message is strictly prohibited.
Thank you.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe,
or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.




As an Amazon Associate we earn from qualifying purchases.

This thread ...
Replies:
Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.