I would have thought that the SSL configuration would have to be done at the point that the user connects, which is presumably the Apache HTTP server.
Don't get too misled by the term "Application". In your case, you configure the certificate etc in DCM and associate it with an "application" which, in your case, will be the HTTP server instance itself.
-----Original Message-----
From: WEB400 [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Dean Eshleman
Sent: 03 March 2015 17:02
To: 'web400@xxxxxxxxxxxx'
Subject: [WEB400] Implementing SSL for web services
Hi,
I need to implement SSL for our web services that are deployed in Websphere on IBM i. They are called via the Apache HTTP server from our own servers. The SSL requirement is coming from our auditors. I'm having trouble figuring out where I need to turn on SSL. Do I do it in the Apache HTTP Server, do I do it in Websphere or do I need to do it in both places? This is Websphere 5.1 Express (I know it is an old version) running on a V5R4 system. We do plan to upgrade this year sometime.
Part of my confusion regarding Apache is that the documentation talks about turning on SSL for an application in Apache. In this case, I don't have an application. Apache just forwards the requests to Websphere. I am currently controlling who can call the web services by defining Locations in Apache and using Allow or Deny on ip addresses. Any ideas or pointers from anyone?
Dean Eshleman
Software Development Architect
Everence Financial
1110 North Main Street
PO Box 483
Goshen, IN 46527
Phone: (574) 533-9515 x3528
www.everence.com<
http://www.everence.com/>
______________________________________________________________________
Confidentiality Notice: This information is intended only for the individual or entity named. If you are not the intended recipient, do not use or disclose this information. If you received this e-mail in error, please delete or otherwise destroy it and contact us at (800) 348-7468 so we can take steps to avoid such transmission errors in the future. Thank you.
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list To post a message email: WEB400@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/web400.
___________________________________________
This email has been scanned by iomartcloud.
http://www.iomartcloud.com/
________________________________
NOTICE: The information in this electronic mail transmission is intended by CoralTree Systems Ltd for the use of the named individuals or entity to which it is directed and may contain information that is privileged or otherwise confidential. If you have received this electronic mail transmission in error, please delete it from your system without copying or forwarding it, and notify the sender of the error by reply email or by telephone, so that the sender's address records can be corrected.
--------------------------------------------------------------------------------
CoralTree Systems Limited
Company Registration Number 5021022.
Registered Office:
12-14 Carlton Place
Southampton
Hampshire
SO15 2EA
VAT Registration Number 834 1020 74.
midrange.com
