Create cert DB
./gskcmd -keydb -create -db /path/to/keydb.kdb -pw password -type cms -expire 0 -stash
Create self signed certificate
./gskcmd -cert -create -db /path/to/keydb.kdb -pw password -label SelfSignedCert -size 2048 -expire 7300 -dn "CN=myserver.com, O=MyCompany, OU=MyDepartment, L=MyCity, ST=MyState, C=MyCountry"
Set it as default
./gskcmd -cert -setdefault -db /path/to/keydb.kdb -pw password -label SelfSignedCert
List available certificates
./gskcmd -cert -list -db /path/to/keydb.kdb -pw password
Print certificate details
./gskcmd -cert -details -db /path/to/keydb.kdb -pw password -label SelfSignedCert
Delete certificates
./gskcmd -cert -delete -db /path/to/keydb.kdb -pw password -label SelfSignedCert
gskcmd can be located under IHS bin directory.
Simple configuration for IBM HTTP Server (IHS)
Enable following configuration under httpd.conf
LoadModule ibm_ssl_module modules/mod_ibm_ssl.so
<IfModule mod_ibm_ssl.c>
Listen 443
<VirtualHost *:443>
SSLEnable
</VirtualHost>
</IfModule>
SSLDisable
KeyFile /path/to/keydb.kdb
Comments
Post a Comment