Re: Setup SSL for Apache indepnedant of *ADMIN

[Bradley Stone <bvstone@xxxxxxxxx>]

Welcome to my world... I looked for this, and automatically importing CAs
and no, IBM doesn't provide anything to make this easy.

You can easily make the config files and instances... but linking
certificates to server applications via anything but the DCM is futile.

If you find a way... I'm all ears.  :)

Brad
www.bvstools.com

On Fri, Aug 7, 2015 at 4:55 PM, Aaron Bartell <aaronbartell@xxxxxxxxx>
wrote:

> Anyone know if there is a way to setup SSL for Apache, from start to
> finish, without requiring the *ADMIN server?  I am looking to automate the
> process via script but am unsure how that can be done concerning the SSL
> Application portion.
>
> Using non-IBMi Apache I could do this:
>
> $ openssl genrsa -des3 -out server.orig.key 2048
> $ openssl rsa -in server.orig.key -out server.key
> $ openssl req -new -key server.key -out server.csr
> $ openssl x509 -req -days 365 -in server.csr -signkey server.key -out
> server.crt
>
> ---httpd.conf---
> SSLCertificateFile /path/server.crt
> SSLCertificateKeyFile /path/server.key
>
> As best I can tell IBM removed the above two Apache directives from the IBM
> i version of Apache.
>
> Aaron Bartell
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.