witty

I recently came across the three session presentation on SSL Cert installation, configuration and troubleshooting demonstration at the IBM site.  It goes in details from creating kdb files to troubleshooting the issues related to SSL Certs on a WebSphere/HTTP Server setup.

Session 1
This IBM WebSphere Support Technical Exchange is designed to demonstrate how to use the IBM key management utility to create keyfiles, certificate signing requests(CSR) and self-signed personal certs. This exchange is a general overview of the certificate chain relationship and certificate authorities, along with importing and exporting public and private keys.

Session 2
This IBM WebSphere Support Technical Exchange is designed to demonstrate how to configure the Secure Sockets Layer within IBM HTTP Server V6.0 and higher. Specifically, this session will teach how to enable multiple SSL virtualhosts on port 443 and how to limit encryption at 128bit or higher for optimal security. You will also receive practical examples on how to automatically redirect non-SSL clients over SSL.

Session 3
This WebSphere® Support Technical Exchange is designed to demonstrate specific Secure Sockets Layer (SSL) debugging techniques. Also to see first hand how SSL tracing is enabled and how to log SSL request and certificate information in the web server’s access log. There will be a demonstration on troubleshooting steps for analyzing and interpreting SSL handshake messages in the web server’s error log.