Background
IBM HTTP Server 2.0.42, 1.3.26 releases include and use GSKit V5 for their
SSL implementation, while IBM HTTP Server 2.0.47, 1.3.28 releases include
and use GSKit V7. The HTTP plug-in V5.0 supports GSKit V5 only,
while HTTP plug-in V5.1 supports GSKit V7 only.
How to identify if the HTTP plug-in is configured for SSL
communication:
Check the plugin-cfg.xml file on the web server machine to see if HTTPS
transports are present. If yes, then SSL is enabled between HTTP
plug-in and the WebSphere Application Server defined.
For example:
<ServerCluster CloneSeparatorChange="false" LoadBalance="Round
Robin" Name="server1_Application_Cluster" PostSizeLimit="10000000"
RemoveSpecialHeaders="true" RetryInterval="60">
<Server ConnectTimeout="0" ExtendedHandshake="false"
MaxConnections="0" Name="server1" WaitForContinue="false">
<Transport Hostname="Application Server domain" Port="9080"
Protocol="http"/>
<Transport Hostname="Application Server domain" Port="9443"
Protocol="https">
<Property Name="keyring"
Value="d:\WebSphere\AppServer\etc\plugin-key.kdb"/>
<Property Name="stashfile"
Value="d:\WebSphere\AppServer\etc\plugin-key.sth"/>
<Property Name="certLabel" Value="selfsigned"/>
</Transport>
</Server>
<PrimaryServers>
<Server Name="server1"/>
</PrimaryServers>
</ServerCluster>
How to identify if the HTTP plug-in V5.0 or V5.1 version is being
used:
Check the http_plugin.log file on the web server machine and search on
"Bld version:"
[Fri Apr 29 12:19:53 2005] 00000c18 00000e24 - PLUGIN: -----System
Information--------
[Fri Apr 29 12:19:53 2005] 00000c18 00000e24 - PLUGIN: Bld version:
5.1.0
[Fri Apr 29 12:19:53 2005] 00000c18 00000e24 - PLUGIN: Bld date: Jun
27 2004, 17:46:26
[Fri Apr 29 12:19:53 2005] 00000c18 00000e24 - PLUGIN: Webserver:
IBM_HTTP_SERVER/1.3.26.2 Apache/1.3.26 (Win32)
[Fri Apr 29 12:19:53 2005] 00000c18 00000e24 - PLUGIN: Hostname =
ECLIENT
[Fri Apr 29 12:19:53 2005] 00000c18 00000e24 - PLUGIN: OS version
5.2, build 3790, ''
[Fri Apr 29 12:19:53 2005] 00000c18 00000e24 - PLUGIN:
--------------------------------------------------------------
|