358 Lotus blogs updated hourly. Who will post next? Home | Downloads | Events | Pods | Blogs | Search | myPL | About 
 
Latest 7 Posts
IBM Integration Bus and the WebSphere Application Server (WAS) Plugin
Tue, Sep 23rd 2014 24
IBM HTTP Server / IBM Global Security Toolkit - Commanding the line ...
Mon, Sep 22nd 2014 85
WebSphere Application Server - Using WSAdmin to manage users and groups
Mon, Sep 22nd 2014 71
WebSphere Application Server - Recovering from failed transaction recovery
Fri, Sep 19th 2014 170
IBM Integration Bus - The Fun Continues .... MQ reason code 2035 while trying to connect
Fri, Sep 19th 2014 167
Security Bulletin: A security vulnerability has been identified in Cognos BI Server shipped with IBM Business Monitor (CVE-2014-0107)
Fri, Sep 19th 2014 201
IBM HTTP Server and SSL Signature Algorithms
Fri, Sep 19th 2014 234
Top 10
Silently installing WebSphere Application Server Network Deployment 8.5 - no GUIs here
Wed, Oct 3rd 2012 1186
java.security.cert.CertPathValidatorException: Certificate chaining error seen with IBM Business Process Manager v8
Mon, Dec 3rd 2012 1040
WAS to DB2 - Null userid is not supported. ERRORCODE=-4461, SQLSTATE=42815
Wed, Aug 14th 2013 816
CWWIM4529E and SECJ0369E seen when authenticating a user in WebSphere Application Server
Tue, Apr 9th 2013 559
SRVE0255E: A WebGroup/Virtual Host to handle / has not been defined.
Fri, Aug 16th 2013 549
More on Lotus Notes and temporary directories
Thu, May 3rd 2012 504
Secure in my CUPS
Fri, Feb 8th 2013 488
Error "CWWIM4512E The password match failed" seen using WebSphere Portal Express v7 on Linux
Thu, Jan 27th 2011 477
IBM BPM 8.5 - Samples and Tutorials
Tue, Oct 29th 2013 472
WAS - How to clear the WebSphere class caches
Mon, Feb 10th 2014 411


IBM WebSphere Application Server - Plugin Personal Certificate will expire on April 26, 2012
   

Does this affect you ?

Abstract

The personal certificate called "WebSphere Plugin Key" within the plugin-key.kdb that is shipped with the WebSphere Plugin install will expire on April 26, 2012.

Content

When the plugin is first installed, it places a copy of the plugin-key.kdb file within the [Plugin_Home]/etc directory. When the plugin is configured to an installed web server, it will pull a copy of this file from the [Plugin_Home]/etc location and place it within the [Plugin_Home]/config/{webservername} directory.

This key file contains a personal certificate that is set to expire by April 26, 2012. Action may be required to maintain encryption between the plugin and application server(s). Please read this documentation carefully to determine if you are affected and what steps may be needed to correct this situation.

I'd strongly recommend that you check this Technote, if you use IBM WebSphere Application Server and the WebSphere Plugin.

In our environment, I used the GSK command, as the IKeyMan GUI was not available to me on my headless Linux boxes: -

$ /opt/IBM/HTTPServer/bin/gsk7cmd -cert -list -db /opt/IBM/HTTPServer/Plugins/config/webserver1/plugin-key.kdb -pw WebAS

This gave me my cell-level certificate e.g. CN=Portal, OU=Root Certificate, OU=PortalCell, OU=PortalNode, O=IBM, C=US  which I then checked for expiration as follows: -

Label: CN=Portal, OU=Root Certificate, OU=PortalCell, OU=PortalNode, O=IBM, C=US
Key Size: 1024 
Version: X509 V3 
Serial Number: 11 FA EF 15 F5 2F E1 18 
Issued by: CN=Portal, OU=Root Certificate, OU=PortalCell, OU=PortalNode, O=IBM, C=US
Subject: CN=Portal, OU=Root Certificate, OU=PortalCell, OU=PortalNode, O=IBM, C=US
Valid: From: Thursday, 20 January 2011 12:05:44 o'clock GMT To: Friday, 16 January 2026 12:05:44 o'clock GMT 
Fingerprint: AE:2A:DC:10:6C:4A:18:A3:A0:46:A3:FD:EB:6E:2E:D0:8A:D2:CE:66 
Signature Algorithm: SHA1withRSA (1.2.840.113549.1.1.5) 
Trust Status: enabled 

Just because my environment is OK does NOT mean that yours is …. go check, go check NOW



---------------------
http://portal2portal.blogspot.com/2012/04/ibm-websphere-application-server-plugin.html
Apr 16, 2012
53 hits



Recent Blog Posts
24


IBM Integration Bus and the WebSphere Application Server (WAS) Plugin
Tue, Sep 23rd 2014 6:45a   Dave Hay
So I am following this rather excellent developerWorks article: - Load balancing WebSphere Message Broker HTTP traffic: Part 1: Load balancing with IBM HTTP Server WebSphere Message Broker V8 lets you generate a configuration file for the WebSphere Plug-in or Apache mod_proxy modules, which are used by IBM HTTP Server and Apache HTTP Server respectively to enable HTTP load balancing. Part 1 of this two-part series shows you how to configure load balancing for WebSphere Message Broker HTTP traffi [read] Keywords: ibm apple application eclipse integration java server websphere xml
85


IBM HTTP Server / IBM Global Security Toolkit - Commanding the line ...
Mon, Sep 22nd 2014 9:05a   Dave Hay
One of my colleagues was looking for inspiration, without too much perspiration, in order to create an SSL/TLS Certificate Service Request (CSR) using IBM HTTP Server and the Global Security Toolkit (GSK). He was hoping to use the GUI tool, IKeyMan, but I tried very hard to persuade him that GUIs are for WIMPs, and that the command-line tool, gskcapicmd is the way to go ( whilst IHS also has ikeycmd, that relies upon a Java Runtime Environment, which may not always be available, especially on a [read] Keywords: admin ibm apple application java network security server websphere wiki
71


WebSphere Application Server - Using WSAdmin to manage users and groups
Mon, Sep 22nd 2014 8:25a   Dave Hay
print AdminTask.searchUsers(["-cn *"]) uid=wasadmin,o=defaultWIMFileBasedRealm uid=wmbadmin,o=defaultWIMFileBasedRealm uid=deAdmin,o=defaultWIMFileBasedRealm print AdminTask.searchGroups(["-cn *"]) cn=developers,o=defaultWIMFileBasedRealm cn=administrators,o=defaultWIMFileBasedRealm cn=dashboard-editor,o=defaultWIMFileBasedRealm cn=dashboard-viewer,o=defaultWIMFileBasedRealm print AdminTask.help('-commands') ... WASX8004I: Available admin commands: WIMCheckPassword - Validates the [read] Keywords: admin application applications security server websphere xml
170


WebSphere Application Server - Recovering from failed transaction recovery
Fri, Sep 19th 2014 10:25a   Dave Hay
Thanks to Twitter for sharing: - IBM_AppServer Great blog on Recovering from failed transaction recovery. Very helpful! Take a look! http://t.co/KoxbxEqNr9 #wasserv 19/09/2014 17:10 When WebSphere Application Server is running a transaction, the transaction information is written to the tranlog directory to log1 & log2. The resources required for that transaction (database name, user, password, etc) are recorded in the partnerlog directory to it's log1 & log2. When a transaction comple [read] Keywords: ibm application community database password server twitter websphere
167


IBM Integration Bus - The Fun Continues .... MQ reason code 2035 while trying to connect
Fri, Sep 19th 2014 7:25a   Dave Hay
So I now have IBM Integration Bus (IIB) 9.0.0.2 and the Toolkit running on my Red Hat Enterprise Linux VM, as per these most recent posts: - Installing IBM Integration Bus 9.0.0.2 on Red Hat Enterprise Linux 6.3 IBM Integration Bus 9.0.0.2 - Tooling Up I have the toolkit installed as user wasadmin because that's the user with which I installed a whole slew of other WebSphere products, using IBM Installation Manager. Therefore, in order to use the Toolkit to create/administer an Integration Node [read] Keywords: connections ibm apple application database enterprise integration linux password red hat security server vm websphere
201


Security Bulletin: A security vulnerability has been identified in Cognos BI Server shipped with IBM Business Monitor (CVE-2014-0107)
Fri, Sep 19th 2014 4:05a   Dave Hay
Security Bulletin: A security vulnerability has been identified in Cognos BI Server shipped with IBM Business Monitor (CVE-2014-0107) Security Bulletin: Cognos BI Server is affected by the following vulnerabilities: CVE-2014-0107, CVE-2014-0075, CVE-2014-0096, CVE-2014-0099, CVE-2014-0119, CVE-2014-0878, CVE-2014-0460 [read] Keywords: ibm security server
234


IBM HTTP Server and SSL Signature Algorithms
Fri, Sep 19th 2014 4:05a   Dave Hay
So, whilst listening to this week's SecurityNow podcast, Episode 473 Google vs. SHA-1, I learned that Google plans to force the web to deprecate the SHA1 ( Secure Hash Algorithm ) from November 2014 even though Microsoft has a more moderate plan to move away from it by late 2017. Google wants us to move to SHA2, aka SHA224 / SHA256 / SHA512, even though their own websites are still using SHA1 at the moment: - Apparently, Google Chrome will start to provide visual feedback to end-users when the [read] Keywords: ibm apple google microsoft podcast security server wiki
87


IBM BPM Advanced 8.5.0.1 - PFS-0065 seen in context of Performance Data Warehouse
Thu, Sep 18th 2014 7:45a   Dave Hay
So, hot on the heels of my previous post: - IBM BPM Advanced 8.5.0.1 - Disabling Process Server to Performance Data Warehouse communication I was looking to replicate the same for Process Center. Strangely, when I looked at my Performance Data Warehouse (PDW) database for the Process Center environment, I did NOT have the TASKS table, merely LSW_TASK, and couldn't work out what SQL was actually used to create the missing table. Interestingly, whilst there are SQL scripts to create all of the BP [read] Keywords: admin ibm database db2 server sql
93


IBM BPM Advanced 8.5.0.1 - Disabling Process Server to Performance Data Warehouse communication
Thu, Sep 18th 2014 6:25a   Dave Hay
So, in order to disable the automatic publishing of events from Process Server to the Performance Data Warehouse database, I followed this IBM Technote: - Disabling tracking data generation for a Process Server or Process Center in IBM Business Process Manager (BPM) My requirement is to disable the use of PDW and instead use IBM Business Monitor ( aka BAM ) instead. In essence, one needs to toggle: - from: - true to: - false in 101Custom.xml ( which I used to override the stock 100Custom.xml ) [read] Keywords: ibm community database server xml
89


IBM Business Process Manager on Cloud service adds case handling and enhanced mobile UIs
Wed, Sep 17th 2014 12:45p   Dave Hay
New features built into IBM® Business Process Manager (IBM BPM) on Cloud include: • Basic case-management capabilities that enable knowledge workers to drive business outcomes by using a combination of structured workflows, ad-hoc tasks, and document processing. • New design capabilities for creating responsive user interfaces that can be designed once and run on any device form factor (phone, tablet, or desktop), to support mobile-ready process applications. • Service availability fo [read] Keywords: ibm apple applications desktop mobile




Created and Maintained by Yancy Lent - About - Blog Submission - Suggestions - Change Log - Blog Widget - Advertising - Mobile Edition