81,092
社区成员
发帖
与我相关
我的任务
分享help! ssl && ibm http
采用的是IBM的http服务器
我用密钥生成工具生成的一个自签证书
但是ie浏览器不能导入
请问是什么原因？
我的具体方法如下：
要在 Windows 平台启动实用程序，请单击：开始 -> 程序 -> IBM HTTP Server ->
启动密钥管理实用程序
单击密钥数据库文件菜单并选择新建。
指定设置并单击确定：
密钥数据库类型：CMS 密钥数据库文件
文件名：WebServerKeys.kdb
位置：到您的“d:\myKeys”目录的路径
输入 SSL 密钥文件的密码（两次以确认）。
选取“是否将密码存储到文件？”选项。单击确定。
创建名为“WebServerKeys.sth”的文件，其中包含密码的编码表单。
单击新建自签署
关闭数据库！
！！！！此时IE不能导入我的自签证书
添加到 httpd.conf 文件的底部file：
LoadModule ibm_ssl_module modules/IBMModuleSSL128.dll
Listen 443
SSLEnable
Keyfile "product_installation_root/myKeys/WebServerKeys.kdb"
SSLClientAuth required
IE浏览器输入IP地址无响应
谢谢各位大虾，斑竹赐教！
--
单击新建自签署
关闭数据库！
！！！！此时IE不能导入我的自签证书
添加到 httpd.conf 文件的底部file：
LoadModule ibm_ssl_module modules/IBMModuleSSL128.dll
Listen 443
SSLEnable
Keyfile "product_installation_root/myKeys/WebServerKeys.kdb"
SSLClientAuth required
IE浏览器输入IP地址无响应
谢谢各位大虾，斑竹赐教！
...全文
请发表友善的回复…
发表回复
leonzhao 2002-08-23
- 打赏
- 举报
当然了，你总不能指望自签的证书是IE认可的可信证书吧？那样要CA干什么呢？
SuperBC 2002-08-23
- 打赏
- 举报
对不起，我少写了一句建立自签证书,方法入你所说：
Click the Create menu, and select New Self-Signed Certificate if you are enabling SSL for testing, or New Certificate Request if you are enabling SSL for production.
但是windows说我这是无效吊销证书。
Click the Create menu, and select New Self-Signed Certificate if you are enabling SSL for testing, or New Certificate Request if you are enabling SSL for production.
但是windows说我这是无效吊销证书。
leonzhao 2002-08-23
- 打赏
- 举报
SSLClientAuth required这句不要吧？
另外你好像没有建立自签证书啊？
啊～～毛病很多的样子，给你一段文字吧：
To create a security key file for production, do the following:
1. Stop the IBM HTTP Server.
2. Change directory to \IBM HTTP Server\conf.
3. Open httpd.conf in a text editor.
4. Ensure that the following lines are uncommented:
a. #LoadModule ibm_ssl_module modules/IBMModuleSSL128.dll
b. #Listen 443
c. #<VirtualHost host.name.com:443>. You must also substitute your
fully qualified host name in this line.
d. #SSLEnable
e. #</VirtualHost>
f. #SSLDisable
g. Keyfile "drive:/IBM HTTP SERVER/ssl/keyfile.kdb".
h. #SSLV2Timeout 100
i. #SSLV3Timeout 1000
5. Save your changes.
6. Select Start Menu—> Programs—> IBM HTTP Server—> Start Key
Management Utility.
7. In the IBM Key Management window, click the Key Database File
menu, and select New.
8. Enter the file name and the file location (as listed in step 4g) in the New
window of IBM Key Management. Click OK.
9. The Password Prompt window appears.
10. Enter and confirm your IBM HTTP Server password, and enable Stash
the password to a file. Click OK.
11. Click the Create menu, and select New Self-Signed Certificate if you are
enabling SSL for testing, or New Certificate Request if you are enabling
SSL for production.
12. On the window that appears, fill in all fields not listed as optional. Click OK.
13. Start the IBM HTTP Server
另外你好像没有建立自签证书啊？
啊～～毛病很多的样子，给你一段文字吧：
To create a security key file for production, do the following:
1. Stop the IBM HTTP Server.
2. Change directory to \IBM HTTP Server\conf.
3. Open httpd.conf in a text editor.
4. Ensure that the following lines are uncommented:
a. #LoadModule ibm_ssl_module modules/IBMModuleSSL128.dll
b. #Listen 443
c. #<VirtualHost host.name.com:443>. You must also substitute your
fully qualified host name in this line.
d. #SSLEnable
e. #</VirtualHost>
f. #SSLDisable
g. Keyfile "drive:/IBM HTTP SERVER/ssl/keyfile.kdb".
h. #SSLV2Timeout 100
i. #SSLV3Timeout 1000
5. Save your changes.
6. Select Start Menu—> Programs—> IBM HTTP Server—> Start Key
Management Utility.
7. In the IBM Key Management window, click the Key Database File
menu, and select New.
8. Enter the file name and the file location (as listed in step 4g) in the New
window of IBM Key Management. Click OK.
9. The Password Prompt window appears.
10. Enter and confirm your IBM HTTP Server password, and enable Stash
the password to a file. Click OK.
11. Click the Create menu, and select New Self-Signed Certificate if you are
enabling SSL for testing, or New Certificate Request if you are enabling
SSL for production.
12. On the window that appears, fill in all fields not listed as optional. Click OK.
13. Start the IBM HTTP Server
