Re: Using a Verisign Certificate for SSL

Chris-


I have one HTTP server instance that serves HTTP on port 80 and HTTPS
on port 443. Here are the sections in my config that I added to get
this scenario working:
( I also assigned the certificate to the application in DCM, using the
"work with applications" task")

LoadModule ibm_ssl_module /QSYS.LIB/QHTTPSVR.LIB/QZSRVSSL.SRVPGM

Listen *:80
Listen *:443

<virtualhost xxx:80>
DocumentRoot /www/storenet/htdocs
<Directory />
  Order Deny,Allow
  Deny From all
</Directory>
<Directory /www/storenet/htdocs>
  Order Allow,Deny
  Allow From all
</Directory>
# Let Apache know about the GLADSTONE library.
# this lib is used to hold CGI programs.
<Directory /QSYS.LIB/GLADSTONE.LIB>
  Order Allow,Deny
  Allow From all
</Directory>
</virtualhost>
<virtualhost xxx:443>
DocumentRoot /www/storenet/htdocs
SSLEngine On
SSLAppName QIBM_HTTP_SERVER_STORENET
<Directory />
  Order Deny,Allow
  Deny From all
</Directory>
<Directory /www/storenet/htdocs>
  Order Allow,Deny
  Allow From all
</Directory>
# Let Apache know about the GLADSTONE library.
# this lib is used to hold CGI programs.
<Directory /QSYS.LIB/GLADSTONE.LIB>
  Order Allow,Deny
  Allow From all
</Directory>
</virtualhost>



On 3/28/06, Joe Pluta <joepluta@xxxxxxxxxxxxxxxxx> wrote:
> Chris, do you have a VirtualHostName directive early on in your config?
> When I tried to add a virtual host for the port, I got one that looked like
> this:
>
> VirtualHostName 10.20.30.40:443
>
> I just wondered if you had the same thing.  I'm going to try the Virtual
> Host without it this time.
>
> Joe
>
> > From: Chris Bipes
> >
> > Here is a post from our Admin HTTP server with HTTPS enabled
> >
> > 17    ServerName AS400.cross-check.com
> > 18    Listen 10.210.250.1:80
> > 19    Listen 10.210.250.1:443
> >
> > 76    <VirtualHost 10.210.250.1:443>
> > 77         SSLEngine On
> > 78         SSLAppName QIBM_HTTP_SERVER_CONFIG
> > 79         SSLClientAuth Optional
> > 80         SetEnv HTTPS_PORT 443
> > 81    </VirtualHost>
> >
> > I would get rid of the SSLEngine Optional and enable the SSLEngine On
> > which is commented out.
>
>
> --
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.
>
>