VM:Webgateway Web Server
Select where you want to go:

System Administrator Tasks - SSL

Implementing SSL in Test Mode
Putting SSL into Production
Turning SSL On
Turning SSL Off
Viewing How SSL Is Set Up
Managing Key Pairs
Generating Key Pairs
Importing Key Pairs
Deleting Key Pairs
Exporting Key Pairs
Managing Certificates
Creating Self-Signed Certificates
Loading Self-Signed Certificates to a Browser
Requesting Certificates
Loading Certificates
Replacing Certificates
Deleting Certificates
Exporting Certificates
Exempting Cipher Suites
SSL Configuration Quick Reference

Implementing SSL in Test Mode (SSL)


Summary of Steps | Steps in Detail

Summary of Steps

  1. Generate a key pair.
  2. Create a self-signed certificate.
  3. Set up VM:Webgateway to allow Secure Sockets Layer (SSL).
  4. Configure VM:Webgateway to turn on SSL.

Steps in Detail

  1. Generate a key pair.

    The key pair will be used in the initial handshake between a web browser and your web server.

  2. Create a self-signed certificate.

    When you create the self-signed certificate, specify the name of the key pair you generated in the previous step.

    A server certificate attests to the identity of your organization and contains the public key of the key pair you specify when creating the certificate. When a web browser initiates a transmission using SSL, your web server transmits the server certificate to the web browser. As a result, your public key is transmitted to the web browser.

    To run SSL in production, use a certificate you obtain from a certificate authority. Use the self-signed certificate to test SSL and to ensure VM:Webgateway is set up correctly to use SSL Feature while you wait for the certificate from the certificate authority.


    Note: On web browsers that support SSL, the public keys of well-known certificate authorities are preloaded. This allows web browsers to validate certificates that are signed by well-known certificate authorities. Because you are using a self-signed certificate, the web browser does not have the public key for your certificate and cannot validate the certificate.

    When web browser users testing SSL request data, the response varies based on the web browser being used. Some web browsers will automatically prompt a web browser user to load a certificate when they enter a URL for a file for which the web browser requires a certificate. Other web browsers require web browser users to load the self-signed certificate to the web browser themselves before attempting to view a file that requires validation using the certificate.


  3. Set up VM:Webgateway to allow SSL.

    Before you can use SSL, you must add these records to the VMWEBSRV CONFIG file:

    • CPUID record specifying a CPUID that allows SSL
    • OPTIONS SSL record
    • KEYPASS record

    For more information about the configuration records and setting up VM:Webgateway for SSL, refer to the Getting Started book.

  4. Configure VM:Webgateway to turn on SSL.

Top
Select where you want to go:

Copyright © 1998, Sterling Software, Inc.