NCC系统IBM_HTTP_Server开启HTTPS

证书申请+IHS开启443参考IHS手册

IBM+HTTP+SERVER（IHS)-HTTPS配置手册.pdf

另外最后需要

在httpd.conf最后添加一行 SetEnv ssl-map-mode offload

WAS开启https

前端服务器访问地址:http://172.16.61.113:9060/ibm/console/unsecureLogon.jsp 登录之后参考如下截图访问

 

修改 plugin-cfg.xml 文件

路径：D:/IBM/WebSphere/Plugins/config/webserver1/plugin-cfg.xml

 重启 was 及 ihs 即可访问 HTTPS 页面

IHS完整配置附件

httpd.conf

附件IHS完整的配置

ServerRoot "D:/IBM/HTTPServer"
PidFile logs/httpd.pid
Timeout 60
LoadModule reqtimeout_module modules/mod_reqtimeout.so
<ifModule mod_reqtimeout.c>
RequestReadTimeout header=20-40,MinRate=500 body=20,MinRate=500
</ifModule>
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 5
Listen 0.0.0.0:80
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authz_core_module modules/mod_authz_core.so
LoadModule authn_core_module modules/mod_authn_core.so
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule include_module modules/mod_include.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule env_module modules/mod_env.so
LoadModule headers_module modules/mod_headers.so
LoadModule unique_id_module modules/mod_unique_id.so
LoadModule setenvif_module modules/mod_setenvif.so
LoadModule mime_module modules/mod_mime.so
LoadModule autoindex_module modules/mod_autoindex.so
LoadModule cgi_module modules/mod_cgi.so
LoadModule dir_module modules/mod_dir.so
LoadModule actions_module modules/mod_actions.so
LoadModule alias_module modules/mod_alias.so
LoadModule status_module modules/mod_status.so
<IfModule mod_status.c>
ExtendedStatus On
</IfModule>
ServerAdmin you@your.address
ServerName dayi-ncc.taeteadata.com
ServerName prod-ncc.taeteadata.com
UseCanonicalName Off
DocumentRoot "D:/IBM/HTTPServer/htdocs"
<Directory />
    Options FollowSymLinks
    AllowOverride None
    FileETag All -INode
    Require all denied
</Directory>
<Directory "D:/IBM/HTTPServer/htdocs">
    Options FollowSymLinks
    AllowOverride None
    Require all granted
</Directory>
<IfModule mod_userdir.c>
UserDir "My Documents/My Website"
</IfModule>
DirectoryIndex index.html index.html.var
<DirectoryMatch "^D:/IBM/HTTPServer/htdocs/$">
DirectoryIndex index.html index.html.var index_ihs.html
</DirectoryMatch>
AccessFileName .htaccess
<Files ~ "^\.ht">
    Require all denied
    Forbid
</Files>
TypesConfig conf/mime.types
HostnameLookups Off
EnableMMAP off
EnableSendfile off
ErrorLog logs/error.log
LogLevel warn
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %D \"%{WAS}e\" %X" combined
LogFormat "%h %l %u %t \"%r\" %>s %b %D \"%{WAS}e\" %X" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
CustomLog logs/access.log common
ServerTokens Prod
ServerSignature On
Alias /icons/ "D:/IBM/HTTPServer/icons/"
<Directory "D:/IBM/HTTPServer/icons">
    Options MultiViews
    AllowOverride None
    Require all granted
</Directory>
ScriptAlias /cgi-bin/ "D:/IBM/HTTPServer/cgi-bin/"
<Directory "D:/IBM/HTTPServer/cgi-bin">
    AllowOverride None
    Options None
    Require all granted
</Directory>
IndexOptions FancyIndexing VersionSort
AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip
AddIconByType (TXT,/icons/text.gif) text/*
AddIconByType (IMG,/icons/image2.gif) image/*
AddIconByType (SND,/icons/sound2.gif) audio/*
AddIconByType (VID,/icons/movie.gif) video/*
AddIcon /icons/binary.gif .bin .exe
AddIcon /icons/binhex.gif .hqx
AddIcon /icons/tar.gif .tar
AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip
AddIcon /icons/a.gif .ps .ai .eps
AddIcon /icons/layout.gif .html .shtml .htm .pdf
AddIcon /icons/text.gif .txt
AddIcon /icons/c.gif .c
AddIcon /icons/p.gif .pl .py
AddIcon /icons/f.gif .for
AddIcon /icons/dvi.gif .dvi
AddIcon /icons/uuencoded.gif .uu
AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl
AddIcon /icons/tex.gif .tex
AddIcon /icons/bomb.gif core
AddIcon /icons/back.gif ..
AddIcon /icons/hand.right.gif README
AddIcon /icons/folder.gif ^^DIRECTORY^^
AddIcon /icons/blank.gif ^^BLANKICON^^
DefaultIcon /icons/unknown.gif
ReadmeName README.html
HeaderName HEADER.html
IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t
AddEncoding x-compress Z
AddEncoding x-gzip gz tgz
AddType application/x-tar .tgz
AddType image/x-icon .ico
BrowserMatch "Mozilla/2" nokeepalive
BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
BrowserMatch "RealPlayer 4\.0" force-response-1.0
BrowserMatch "Java/1\.0" force-response-1.0
BrowserMatch "JDK/1\.0" force-response-1.0
BrowserMatch "Microsoft Data Access Internet Publishing Provider" redirect-carefully
BrowserMatch "^WebDrive" redirect-carefully
BrowserMatch "^WebDAVFS/1.[012]" redirect-carefully
BrowserMatch "^gnome-vfs" redirect-carefully
<IfModule mod_status.c>
<Location /server-status>
    SetHandler server-status
    Require all denied
</Location>
</IfModule>
LoadModule mpmstats_module modules/debug/mod_mpmstats.so
<IfModule mod_mpmstats.c>
ReportInterval 300
TrackModules On
TrackHooks allhooks
SlowThreshold 60
TrackHooksOptions logslow
</IfModule>
<IfModule mod_net_trace.c>
NetTraceFile logs/nettrace.log
NetTrace client * dest file event senddata=65535 event recvdata=65535 event misccalls
</IfModule>
LoadModule backtrace_module modules/debug/mod_backtrace.so
LoadModule whatkilledus_module modules/debug/mod_whatkilledus.so
WKUDisableWindowsErrorBox ON
AcceptFilter http none
AcceptFilter https none
<IfModule mpm_winnt.c>
ThreadLimit         1200
ThreadsPerChild     1200
MaxRequestsPerChild  0
MaxMemFree 2048
</IfModule>
LoadModule was_ap22_module D:\IBM\WebSphere\Plugins\bin\32bits\mod_was_ap22_http.dll
WebSpherePluginConfig "D:\IBM\WebSphere\Plugins\config\webserver1\plugin-cfg.xml"
LoadModule ibm_ssl_module modules/mod_ibm_ssl.so
<IfModule mod_ibm_ssl.c>
  Listen 0.0.0.0:443
  DocumentRoot "D:\IBM\HTTPServer\htdocs"
  <VirtualHost *:443>
    DocumentRoot "D:\IBM\HTTPServer\htdocs"
    ServerName dayi-ncc.taeteadata.com
    ServerName prod-ncc.taeteadata.com
    SSLEnable
  </VirtualHost>
</IfModule>
SSLDisable
KeyFile "D:\IBM\HTTPServer\ssl\key.kdb"
SetEnv ssl-map-mode offload