Configure JAS behind IHS
Hi Team,
We are setting up CLM 6.0.5 environment with JAS and IHS.
here our requirement is to make the proxy pass for JAS through IBM HTTP Server as other applications like CCM and RM.
We tried the following setup and failed.
1) We extracted the certificate from JAS liberty profile and imported in IHS server kdb file.
2) We merged the plugin of jas along with other applications and pointed the https server conf file to the merged plugin.
3) we are getting 500 error while accessing the JAS through IHS site where the url is accessible over the JAS port 9643.
Please suggest us a solution here.
One answer
Hi,
an HTTP 500 error is pretty generic. Please look into the JAS Liberty log files (message.log , console.log) and the IHS logfiles to determine any root cause. Check the server.xml for any typos in the path to the keystore or password. As a last resort I would check the plugin-cfg.xml on the IHS side.
A wild guess: if your certificates have 4096 bits you might have run into https://www-01.ibm.com/support/docview.wss?uid=swg21663373
As mentioned in https://www.ibm.com/support/knowledgecenter/SSYMRC_6.0.5/com.ibm.jazz.install.doc/topics/t_install_server_certificates.html the bundled JVM does not support 4096 bit certificates. Once you replace the local_policy.jar in the JVM as per the technote it would work if this is the issue.
-Arne
As mentioned in https://www.ibm.com/support/knowledgecenter/SSYMRC_6.0.5/com.ibm.jazz.install.doc/topics/t_install_server_certificates.html the bundled JVM does not support 4096 bit certificates. Once you replace the local_policy.jar in the JVM as per the technote it would work if this is the issue.
-Arne