Re: SSL and public facing web site on the i

Paul,

SSL only encrypts streams exchanged between the browser and the HTTP server; it doesn't protect the database or other server objects, per se. However you can be confident in exposing the IBM i Apache server to the Internet if you configure it appropriately. The good news is that the Apache server disallows access to everything by default. You must explicitly expose resources via HTTP configuration directives.

If you have SSL working internally, the same configuration for SSL probably works for external users as well. However I suspect that the real problem is that you're unsure about Apache server configuration, in general. You may want to have an expert review your Apache configuration.

-Nathan




----- Original Message -----
From: Paul Therrien <ptherrien@xxxxxxxxxxxxxxx>
To: "Midrange Systems Technical Discussion (midrange-l@xxxxxxxxxxxx)" <midrange-l@xxxxxxxxxxxx>
Cc:
Sent: Tuesday, April 23, 2013 9:38 AM
Subject: SSL and public facing web site on the i

Our company has a public web address  and a GoDaddy certificate that we currently use for SSL  to our webmail that is hosted on an exchange server.
We are developing our first www facing site on the IBM I and want to secure it with SSL.  I have made a few stabs at trying to get SSL configured correctly and have managed to get a local CA in place on the IBM I and open the web site internally using SSL.  But I am lost as to how to configure SSL and the Apache server on the I.
I am a great (IMHO) software guy, but I am a newbie on web infrastructure.
What do I need to do to allow our web site on the I to be accessible from the internet via our www domain and to incorporate the SLL certificate that we have purchased from GoDaddy?

I appreciate your help.

Paul