WebSphere Application Server & Liberty

WebSphere Application Server & Liberty

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Urgent: Enabling Mutual Authentication on Websphere Application Server 6.1

    Posted 08/11/10 10:36 AM
    Urgent: Enabling Mutual Authentication on Websphere Application Server 6.1

    --------------------------------

    Hi All,
    I am trying to enable mutual authentication on two WAS 6.1 one is acting as a server and another as client. Lets call them as WAS1 and WAS2 respectively.
    For that I have followed the following steps:

    1.I have created keystore(K1 and K2) and a truststore(T1 and T2) on both WAS1 and WAS2.
    2.I have generated CSR for both WAS1 and WAS2 using the K1 and K2.
    3.Submitted this CSR to Verisign to get Trial Certificates.
    4.From that I got three certificates for both WAS1 and WAS2
    (a)Personal Certificates given at the end of mail(P1 and P2)
    (b)Test CA Root Certificates(TR1 and TR2)
    (c) Trial SSL Intermediate CA Certificate (TS1 and TS2)
    5.I have imported the P1 into K1 and P2 into K2 as Personal Certificates( without deleting the
    default key generated during keystore creation)
    6.Imported TR1 and TS1 in both T1 and T2 as signer certificates (as CA for both the servers is same so will be same for both WAS1 and WAS2).
    7.Also I have imported TR1 and TS1 in both the systems browser (as CA for both the servers is same so will be same for both WAS1 and WAS2).
    8.Now I have created a SSL configuration for WAS1 and WAS2 selecting the appropriate Keystore and Truststore.
    9.Now I have configured the Inbound nodes on both WAS1 and WAS2. ( I am not clear about Inbound and Outbound concept means where I have to use Inbound and where outbound).
    10.Now when I hit the https url of WAS1 and WAS2 admin console I am able to access it without any error.
    11.But as soon as I made Client Authetication as required from admin console( no other changes made anywhere), and hit the same URL of admin console it stops working.

    Please let me know If I am missing somewhere like is there any other setting required for enabling Client authentication on Server side WAS.
    Also how can I check the 2-way SSL using a webservice on WAS1 and its web client on WAS2?
    If anyone has any sample webservice and client code please share it with me.
    Actually I have developed a client but it gives me error that Trusted Certificates not found.

    I have followed the below link for SSL configuration:
    publib.boulder.ibm.com/infocenter/wasinf...

    Thanks
    Gaurav

    --------------------------------

    Posted By: gaurav_jain12 at Jan 22 2009 4:53AM


  • 2.  Urgent: Enabling Mutual Authentication on Websphere Application Server 6.1

    Posted 08/11/10 10:43 AM
    >>>> But as soon as I made Client Authetication as required from admin console( no other changes made anywhere), and hit the same URL of admin console it stops working.


    It sounds like you set Client Authentication as required for admin_host.

    You should be setting this for (Inbound) on the endpoint your webservice is listening on on WAS 1, and (Outboud) on the protocol (HTTP?) your client is using to make the call over.

    --------------------------------

    Posted By: Travis Retzlaff at Jan 22 2009 3:02PM


  • 3.  Urgent: Enabling Mutual Authentication on Websphere Application Server 6.1

    Posted 08/11/10 10:48 AM
    Urgent: Enabling Mutual Authentication on Websphere Application Server 6.1

    --------------------------------

    Thanks for your reply.

    Can you please share some step by step document or some link for the same.? It will be really helpful to me.

    Thanks
    Gaurav Jain

    --------------------------------

    Posted By: gaurav_jain12 at Jan 23 2009 10:24AM


Related Content