电子安全https配置方案启用

疑问请联系NC添加wasHTTPS启用配 WAS集群Https启动配 导入NC提供的..................................................................................................... 三、电子采购HTTPS特殊配 nchome内ebvp配置文件代码修 IHS配置文件修 NC6x中间件集群HTTPS启动配 一、Apache安 三、HTTPS配置方 生成未签署的CSR文件 查看......................................................................................................................配置HTTPS方式..................................................................................................四、电子采购HTTPS特殊配 nchome内ebvp配置文件代码修 库文件的格式需要为PKCS12,该格式以p12为后缀，在NChome 运行D:\IBM\HTTPServer\bin\ikeyman.bat导入NChome中提供的库,运行D:\IBM\AppServer\bin\ikeyman.bat导入NChome运行D:\IBM\AppServer\bin\ikeyman.bat导入NChomeufida.p12库导入分别导和分别导入.如javavagNode01Node,javavagNode02。LoadModuleLoadModuleLoadModuleibm_ssl_modulemodules/mod_ibm_ssl.soListenKeyFile{WasHome}/IBM/HttpServer/Plugins/config/webserver1/plugin-key.kdbSSLV2Timeout100#ncpluginconf@ver6.0-FriDec0614:41:55GMT+08:002013#<VirtualHost<VirtualHost<VirtualHost<VirtualHost<VirtualHost<VirtualHost<VirtualHost<VirtualHost在{WasHome}/IBM/HTTPServer/conf/httpd.conf文件中找到#LoadModulerewrite_modulemodules/mod_rewrite.so#变为：LoadModulerewrite_modulemodules/mod_rewrite.soListen:443RewriteEngineOnRewriteCond%{REQUEST_URI}^/ebvpRewriteRule(.*)http://%{HTTP_HOST}%{REQUEST_URI}[L]注意：如果HTTP默认不是80端口，请配置RewriteRule(.*)http://%{HTTPHOST}:端口号%{REQUEST_URI}[L]openssl的ApacheAPACHE，生成配置文件即可。 Loading'screen'intorandomstate-done eis65537D:\ncenv\apache22ssl\conf>..\bin\opensslreq-new-keyserver.key-outserver.csr-configLoading'screen'intorandomstate-Youareabouttobeaskedtoenterinformationthatwillbeincorporatedintoyourrequest.WhatyouareabouttoenteriswhatiscalledaDistinguishedNameoraDN.TherearequiteafewfieldsbutyoucanleavesomeblankForsomefieldstherewillbeadefaultvalue,Ifyouenter'.',thefieldwillbeleftblank.CountryName(2lettercode)StateorProvinceName(fullname)[Some-LocalityName(eg,city)OrganizationName(eg,)[InternetWidgitsPty]:UFIDAOrganizationalUnitName(eg,section)[]:UFIDACommonName(e.g.serverFQDNorYOURname)[] Address[] tobesentwithyourrequestAchallengepasswordAnoptionalnameCountryName(2lettercode)[AU]: CountryName需要输入CNAchallengepassword在windows环境下不用输入。CommonName(e.g.serverFQDNorYOURname)中CommonName必须和ApacheHOME\conf\httpd.confServerNameapache启动时会错报错：RSAserverCommonName(CN)‘javavag’doesNOTmatchservername!?D:\ncenv\apache22ssl\conf>..\bin\opensslx509 Loading'screen'intorandomstate-doneSignatureok x509表示生成的为X.509:Serial NotBefore: 407:14:542012NotAfter: 407:14:542013 SubjectPublicKeyInfo:RSAPublicKey:(1024bit)Modulus(1024bit):Exponent:65537(0x10001)httpd.conf文件配置#Includeconf/extra/httpd-ssl.conf##LoadModulessl_modulemodules/mod_ssl.so#在{ApacheHome}\conf\extra\httpd-ssl.conf文件中找到VirtualHost_default_:443， Root"{ApacheHome}/htdocs"##SSLVirtualHost Generalsetupforthevirtual#Root"D:/ncenv/apache22ssl/htdocs"JKMountFileconf/perties #ServerAdmin可以修改为管理员邮箱ErrorLog"{ApacheHome}/logs/error.log" SSLEngine Enable/DisableSSLforthisvirtual Server ServerPrivateKey:启动NC在{WasHome}/IBM/HTTPServer/conf/httpd.conf文件中找到#LoadModulerewrite_modulemodules/mod_rewrite.so#变为：LoadModule