RE: SSL TOMCAT 5 on iSeries

Mike,

It looks like I referenced the IBM provided connector in the article so
you'll want to change the path to where ever you put the one you
downloaded from apache.org.

I'm not sure if using the wizard buys you anything or not. Since the
connectors are different, there may be changes (besides path changes)
you'd have to make anyway (I'm not implying that there are changes, just
that you'd need to check). Personally, I'd check the connector docs and
just follow along with them.

Matt

-----Original Message-----
From: web400-bounces+matt.haas=thomson.com@xxxxxxxxxxxx
[mailto:web400-bounces+matt.haas=thomson.com@xxxxxxxxxxxx] On Behalf Of
Mike Cunningham
Sent: Wednesday, October 12, 2005 10:32 PM
To: web400@xxxxxxxxxxxx; Haas, Matt
Subject: RE: [WEB400] SSL TOMCAT 5 on iSeries

Thanks Matt. What you sent got me close. I have the mod_jk service
program installed. And I read
http://www.ignite400.org/news/pdf/news2002030304.pdf on how to install
tomcat 4. 
 
your article talks about adding this to the Apache config.
LoadModule jk_module /QSYS.LIB/QHTTPSVR.LIB/QZTCJK.SRVPGM
I would assume I need to change the QZTCJK.SRVPGM to the newer
MOD_JK.SRVPGM

The rest of the directives look fairly simple. Do you think it would be
of any benefit to use the Apache tomcat wizard to setup the IBM
recommended directives for tomcat and then modify the Apache config to
point to the new connector /
 

>>> Matt.Haas@xxxxxxxxxxx 10/12/2005 10:11:51 AM >>>

Mike,

Unless you want to mess with OpenSSL (I don't even know if this has been
ported to OS/400), the path of least resistance is to set up an HTTP
server running SSL in front of it. You will not be able to use the
wizard to do this but it isn't all that difficult. The first thing
you'll need to do is download the connector from
http://www.apache.org/dist/jakarta/tomcat-connectors/jk/binaries/iseries
/ and install it. Once it's installed, just follow the documentation at
http://jakarta.apache.org/tomcat/connectors-doc/ to configure it. I
wrote an article on doing this for Tomcat 4 (I think it's available from
http://www.ignite400.org) a while back but it's pretty easy if you can't
find the article.

Matt

-----Original Message-----
From: web400-bounces+matt.haas=thomson.com@xxxxxxxxxxxx
[mailto:web400-bounces+matt.haas=thomson.com@xxxxxxxxxxxx] On Behalf Of
Mike Cunningham
Sent: Wednesday, October 12, 2005 9:48 AM
To: web400@xxxxxxxxxxxx
Subject: [WEB400] SSL TOMCAT 5 on iSeries

We have a tomcat 5 engine running on our iSeries (V5R3) and are
currently using the built in HTTP server to serve applications (i.e. the
default port 8080 server) . We would like to setup SSL on this tomcat 5
server but it does not appear in the IBM Certificate manager as an
application to assign a certificate to. We have other Apache HTTP
servers running under SSL and one Apache server running SSL and using
the inprocess tomcat server. We have done some investigation and appear
to have two options. Setting up SSL manually for the tomcat HTTP server
as per instructions on the tomcat site or configuring the existing
Apache SSL HTTP server to use the tomcat 5 server as an out-of-process
server. The second option sounded easier and more logical but when we
tried to the setup using the tomcat wizard setup the Apache server does
not appear to know about the tomcat 5 server. Has anyone setup tomcat 5
to run SSL and if so how did you do it ?