RE: SSL TOMCAT 5 on iSeries

Thanks Matt. What you sent got me close. I have the mod_jk service program 
installed. And I read http://www.ignite400.org/news/pdf/news2002030304.pdf on 
how to install tomcat 4. 
 
your article talks about adding this to the Apache config.
LoadModule jk_module /QSYS.LIB/QHTTPSVR.LIB/QZTCJK.SRVPGM
I would assume I need to change the QZTCJK.SRVPGM to the newer MOD_JK.SRVPGM

The rest of the directives look fairly simple. Do you think it would be of any 
benefit to use the Apache tomcat wizard to setup the IBM recommended directives 
for tomcat and then modify the Apache config to point to the new connector /
 

>>> Matt.Haas@xxxxxxxxxxx 10/12/2005 10:11:51 AM >>>

Mike,

Unless you want to mess with OpenSSL (I don't even know if this has been
ported to OS/400), the path of least resistance is to set up an HTTP
server running SSL in front of it. You will not be able to use the
wizard to do this but it isn't all that difficult. The first thing
you'll need to do is download the connector from
http://www.apache.org/dist/jakarta/tomcat-connectors/jk/binaries/iseries
/ and install it. Once it's installed, just follow the documentation at
http://jakarta.apache.org/tomcat/connectors-doc/ to configure it. I
wrote an article on doing this for Tomcat 4 (I think it's available from
http://www.ignite400.org) a while back but it's pretty easy if you can't
find the article.

Matt

-----Original Message-----
From: web400-bounces+matt.haas=thomson.com@xxxxxxxxxxxx
[mailto:web400-bounces+matt.haas=thomson.com@xxxxxxxxxxxx] On Behalf Of
Mike Cunningham
Sent: Wednesday, October 12, 2005 9:48 AM
To: web400@xxxxxxxxxxxx
Subject: [WEB400] SSL TOMCAT 5 on iSeries

We have a tomcat 5 engine running on our iSeries (V5R3) and are
currently using the built in HTTP server to serve applications (i.e. the
default port 8080 server) . We would like to setup SSL on this tomcat 5
server but it does not appear in the IBM Certificate manager as an
application to assign a certificate to. We have other Apache HTTP
servers running under SSL and one Apache server running SSL and using
the inprocess tomcat server. We have done some investigation and appear
to have two options. Setting up SSL manually for the tomcat HTTP server
as per instructions on the tomcat site or configuring the existing
Apache SSL HTTP server to use the tomcat 5 server as an out-of-process
server. The second option sounded easier and more logical but when we
tried to the setup using the tomcat wizard setup the Apache server does
not appear to know about the tomcat 5 server. Has anyone setup tomcat 5
to run SSL and if so how did you do it ?