These procedures describe how to set up Secure Sockets Layer (SSL) on a single Sametime
® Gateway server for both SIP and XMPP communications.
Before you begin
Before you begin, make sure the Sametime
Gateway server is running.
About this task
To have a secure network connection, you will create a key for secure network communications and receive a certificate from a certificate authority (CA) that is designated as a trusted CA on your server.
® Application Server uses the certificates that reside in keystores to establish trust for a SSL connection. WebSphere
Application Server creates the key.p12 default keystore file and the trust.p12 default truststore file during profile creation.
A default, self-signed certificate is also created in the key.p12 file at this time. Do not use this self-signed or other self-signed certificate to connect to external communities.
Ensure that the SSL certificate contains the Basic Constraints
extension. Do not use a non-SSLv3-compliant self-signed CA. WebSphere
Application Server 6.1 uses the IBM
® JDK 1.5.0 JSSE2 which checks for the presence of the Basic Constraints
extension. If the extension is not set, WebSphere
Application Server assumes that the CA is not a valid CA but a user certificate, which in returns doesn't allow to validate a server certificate as valid, because the issuing CA is not found.
Trial certificates are not publicly trusted and so cannot be used to test against public instant messaging providers such as AOL Instant Messenger.
The following procedures describe how to:
- Import the certificate authorities' public certificate used by each of the public or private external communities your Sametime Gateway server will be communicating with.
- Request a CA-signed certificate, and then import the signed certificate that the CA provided in response. Before performing this step you might have to import intermediary certificates.
- Configure the WebSphere environment to make use of the imported keys.
A complete technical reference of how to setup up SSL on the WebSphere
Application Server can be found in the WebSphere
Application Server information center
Parent topic: Configuring TLS/SSL for Sametime Gateway