On Apache I’m using 3rd party signed certificate. And I’ve added Apache root
certificate to WAS truststore to trust my Apache. Similar way I want to add my
WAS certificate to Apache to trust my Application server. On WAS end I’m having
a self-signed certificate.
Below two parameters determine my Apache server certificate this contains
certificate of my virtual which end user access.
SSLCertificateFile /u/applic/tc/HTTP/config/ssl/virtual.pem
SSLCertificateKeyFile /u/applic/tc/HTTP/config/ssl/virtual.key
I’m struckup on how can I add my websphere certificate on to Apache truststore.
Earlier I was using IBM HTTP server and Plugin instead of Apache where I’ve kdb
file where I used to add Websphere server personal certificate to signer
certificates of HIS in kdb file. But in Apache as I use pem and key files
unable to find exactly where I can add websphere certificate for mutual
authentication.
From Apache documentation I see it doesn’t support encrypted private keys.
Warm Regards,
Naveen Kumar Reddy N
IBM Middleware WAS-MQ Tower Lead ( WalMart )
Toll Free Number - 866-912-0282(B),855-755-9356(H)
Mail: [email protected]<mailto:[email protected]>
SLACK Channel:: middleware_l2
[cid:[email protected]]
Middleware ServiceNow Service Catalog Task Policy::
https://collaboration.wal-mart.com/display/IPSMW/Service+Now+Service+Task+Catalog+Policy
Middleware ServiceNow Change Control Policy ::
https://collaboration.wal-mart.com/display/IPSMW/Change+Control+Policy
Middleware Customer Page::
https://teams.wal-mart.com/sites/Middleware/Customers/Pages/default.aspx
From: Eric Covener [mailto:[email protected]]
Sent: Sunday, February 11, 2018 11:52 AM
To: [email protected]
Subject: EXT: Re: [users@httpd] Mutual authentication between Apache HTTP
server and an application server.
On Sun, Feb 11, 2018 at 12:47 PM, Naveen Nandyala - Vendor
<[email protected]<mailto:[email protected]>> wrote:
Hi,
I’m using Apache HTTP server as a webserver and Websphere
application server as an Application server. Apache is using Proxy to redirect
requests from Apache to Websphere. On my websphere side security is enabled,
and its looking for mutual authentication. Could you please help me with where
I can add my Application server’s root certificate on Apache end?
Could you please let me know how can I add websphere
certificate in my Apache. I’ve tried using “
SSLProxyMachineCertificateFile” and “SSLProxyMachineCertificatePath” which
points to Websphere applicaton server certificate. But its not working and I’m
getting below error.
That's the right way to specify a client certificate. But it shouldn't be
"websphere's certificate" it should be a certificate that identifies your
webserver and is trusted by your application server.
[Sat Feb 10 19:34:38.426645 2018] [ssl:warn] [pid 60369:tid 140460446177024]
AH02268: Proxy client certificate callback: (XXXXX:443) downstream server
wanted client certificate but none are configured
Was
SSLProxyMachineCertificateFile set? Did it have a key and a cert in it?
[Sat Feb 10 19:34:38.429477 2018] [proxy_http:error] [pid 60369:tid
140460446177024] (103)Software caused connection abort: [client XXXXXXX]
AH01102: error reading status line from remote server XXXXXX.
[Sat Feb 10 19:34:38.429523 2018] [proxy:error] [pid 60369:tid 140460446177024]
[client XXXXXXXX] AH00898: Error reading from remote server returned by /XXXXXXX
This is just the abrupt closure of the connection due to WAS not finding a
client certificate.
