SSL Enabling on Sun solaris 9 and Sun one web server 6.1

Hi All

Can any one help me to configure SSL for my server

Details-: Sun Solaris 9

webserver-: Sunone web Server 6.1

wt are the pre requestions for enableng SSL on this server

What all are the Pakages/softwares should installed as a prerequestion.

Any thired party software product is nessesary for the configuration .

thanks in advance

Damu

[410 byte] By [DPN] at [2007-11-25 22:30:13]
# 1

All steps for configuring SSL with webserver 6.1 are very well documented, see: http://docs.sun.com/source/819-0130/agcert.html

Speaking of prerequisites, all you need is a certificate obtained from VeriSign(some other certificate authority) or created by you. No extra software or packages required.

Sultal at 2007-7-5 2:41:53 > top of Java-index,Application & Integration Servers,Application Servers...
# 2

HI sultal

First of all I am new to this type of setups .

From the links i concluded that SSL is a secure protocol which is runnig on the basics of TCP/IP and is used to secure the communication between client and server when ever a web based application is in picture.

And a certificate is providing by a thired party or can be self also

it is certifying / authenticating that the secured web site is owned by the genune party and the transactions with the party is doing through a encrypted format.

Am i correct up to this?

Then my dowt is that

Is it possible to make my server SSL enabled with out using any certificate ?( the documents you are given is telling about certificates)

If possible How?

After all can I install some certificates lateron ?

Thanks and regards

Damu

DPN at 2007-7-5 2:41:53 > top of Java-index,Application & Integration Servers,Application Servers...
# 3

> it is certifying / authenticating that the secured

> web site is owned by the genune party and the

> transactions with the party is doing through a

> encrypted format.

>

> Am i correct up to this?

Correct, that is what SSL/certificates are for.

>

> Then my dowt is that

>

> Is it possible to make my server SSL enabled with

> h out using any certificate ?( the documents you

> are given is telling about certificates)

No it is not possible - the whole idea behind SSL communication is that it is based on TRUSTED secure communication. If a client can not check validity of server's certificate it is not trusted any more.

It might not seem to be the case when you create a self-signed certificate, but it really is so. In case of a self signed certificate you(i.e your browser) trust yourself with whatever you do with your application on your webserver.

> After all can I install some certificates lateron ?

>

If you really need SSL with your webserver you have to either create a self signed certificate, see this: http://sial.org/howto/openssl/self-signed/

or request a test certificate from www.verisign.com or www.thawtee.com

Sultal at 2007-7-5 2:41:53 > top of Java-index,Application & Integration Servers,Application Servers...
# 4

Hi sultal

Firs of all Thank you for your Valueable time and technical updates on my quest.

i had installed the Verisghn certificate (14 days evaluation ) for my server

after installation i added the server also

then also my server pages was not showing secure i mean the symbol of the lock was not showing on the browser lower right side

Then i restarted the server (fully cold start of solaris)

after i started the webserver from /opt/SUNWwebsrv/https-adm/start..

it asking for the password -: that also i provided

it is getting started and showing the listioner port is ready ...with so and so address as per that i tried with

http://<hostname>:443

and

https://<hostname>:443

even replaced the hostname with IP address also

then also the adminitrative page is not getting opened ?

but the webpages are getting opened with out any problem with the same port ie 443

earlier my webpage port was 443

and

my administrative port was 8888

i tried both

same problem is exisiting

please help me to sort it out

Regards

Damu

DPN at 2007-7-5 2:41:53 > top of Java-index,Application & Integration Servers,Application Servers...
# 5

I don't think I help you with these problems, all I can say is you must have done something wrong during ssl or certificate install. I personally haven't seen issues you mentioned. Webserver startup asking for admin password is normal for secure instances.

I'd recommend you to remove the instance that doesn't work well, create a new one and try ssl/certificate setup again.

Sultal at 2007-7-5 2:41:53 > top of Java-index,Application & Integration Servers,Application Servers...
# 6
Hi SultalThanks for your replaycan you tell me how can i remove this instance as now i am not able to go to the administrative console of the webserver is there any other option to do it if so how it will be Thanks and RegrardsDamu
DPN at 2007-7-5 2:41:53 > top of Java-index,Application & Integration Servers,Application Servers...
# 7
You should use HttpServerAdmin command line utility: http://docs.sun.com/source/819-0130/agcmdln.html The command you need is "Delete Virtual Server".Reinstall your webserver if you get it messed up.
Sultal at 2007-7-5 2:41:53 > top of Java-index,Application & Integration Servers,Application Servers...