IBM HTTP Server tasks

You must apply maintenance to your IBM HTTP Server installation. Complete one of the following based on the version of IBM HTTP Server that is installed.

Before you begin

Note: To determine your version of IBM HTTP Server, see Checking your IBM HTTP Server version.

About this task

During the instance creation process, WebSphere Commerce creates and stores the IBM HTTP Server configuration information in the following location: WC_installdir/instances/instance_name/httpconf

Windows The Configuration Manager also creates a Windows service named IBM HTTP Server for WebSphere Commerce (instance_name) for each instance that uses a IBM HTTP Server. If you configured WebSphere Commerce Payments, the Windows service named IBM HTTP Server for WebSphere Commerce Payments (instance_name) is created.

By default WebSphere Commerce configures the IBM HTTP Server to use SSL. This SSL configuration used the self-signed certificate that is shipped with WebSphere Commerce.

Note: The self-signed certificate key file that is provided with WebSphere Commerce is for testing purposes only.

Procedure

Ensure the plug-in is specified in the WC_installdir/instances/instance_name/httpconf/httpd.conf file.
Verify that the following lines exist in the httpd.conf file:
```
 LoadModule was_ap22_module WAS_Plug-indir/bin/mod_was_ap22_http.so
```
```
 LoadModule was_ap22_module WAS_Plug-indir/bin/mod_was_ap22_http.dll
```
IBM i version 6.1
```
LoadModule was_ap20_module /QSYS.LIB/QHTTPSVR.LIB/QSVT2070.SRVPGM
```
IBM i version 7.1
```
LoadModule was_ap20_module /QSYS.LIB/WAS_Installation_Library.LIB/QSVTAP22.SRVPGM 
```
Note: Ensure that the plugin file exists at the designated paths on your system. For example, on a Windows environment, the .dll file might be located at WAS_Plug-indir/bin/32bits/mod_was_ap22_http.dll.
Where WAS_Installation_Library is the installation library for your instance of WebSphere Application Server.
```
WebSpherePluginConfig "WAS_installdir/profiles/profile_Name/config/cells/
WC_instance_name_cell/nodes/webserver_name_node/servers/webserver_name/
plugin-cfg.xml"
```
Where webserver_name is the name of the WebSphere Commerce web server. For example, webserver1.
These lines might not display together. Search the file to confirm the presence of these lines. If these lines are missing, add them to the end of the file and restart the web server.
Assign a certificate to your HTTP server by using Digital Certificate Manager (DCM). For more information, see the IBM i documentation. Select your operating system version, and review the "Manage public Internet certificates for SSL communication sessions" topic.
Verify that the configuration files are updated:
1. Start your web server as described in Starting and stopping the IBM HTTP Server.
2. Stop your web server as described in Starting and stopping the IBM HTTP Server.

What to do next

If you have a remote web server, follow the procedure in the topic Remote web server tasks.

Your web server provides a secure environment for your business transactions by using encryption technology. Encryption is the scrambling of information transactions on the Internet so that they cannot be read until they are unscrambled by the receiver. The sender uses an algorithmic pattern or key to scramble (encrypt) a transaction, and the receiver uses a decryption key. These keys are used by the Secure Sockets Layer (SSL) protocol.

Your web server uses an authentication process to verify the identity of the person with whom you are conducting business. This process involves obtaining a certificate that is signed by a trusted third party that is called a certificate authority (CA). Equifax and VeriSign Inc. are common certificate authorities. Other CAs are available as well. To create a production key file, complete the following steps:

Request a secure certificate from a certifying authority.
Set your production key file as the current key file.
Receive the certificate and test the production key file.

Note:

If you are already using a production key file that is signed by a certifying authority, you can skip these steps.
Your browser might display security messages. Review the information in each message carefully and decide how to proceed.