Installation guide

Using Secure Sockets Layer (SSL) With an Agent
Chapter 2 Policy Agents on Solaris and HP-UX 51
3. Install root CA certificate.
# / Agent_Install_Dir /SUNWam/agents/proxy/cert/certutil -N -d .
#/
Agent_Install_Dir /SUNWam/agents/proxy/cert/certutil -A -n cert-name -t
"C,C,C" -d cert-dir -i cert-file
In the commands above, the variables represent the following:
❍ cert-name can be any name for this root CA certificate.
❍ cert-dir is the directory where the certificate and key stores are located.
❍ cert-file is the base-64 encoded root CA certificate file.
For more information on the certutil utility, enter certutil -H for online
Help.
To Install the Root CA Certificate on IBM HTTP Server 1.3.19
You can use the certutil program to install the root CA certificate on IBM HTTP
Server 1.3.19.
1. In C shell, at the command line, enter the following commands:
# mkdir server_instance_dir/cert
# setenv LD_LIBRARY_PATH /Agent_Install_Dir/SUNWam/agents/
ibmhttp/lib:
/Agent_Install_Dir/SUNWam/agents/lib
2. Create the necessary certificate database if you have not already done so.
# / Agent_Install_Dir /SUNWam/agents/ibmhttp/cert/certutil -N -d .
3. Install root CA certificate.
#/ Agent_Install_Dir /SUNWam/agents/ibmhttp/cert/certutil -A -n cert-name
-t "C,C,C" -d cert-dir -i cert-file
In the command above, the variables represent the following:
NOTE
This will create the following three files in the directory server_instance_dir/cert:
• secmod.db
• key3.db
• cert7.db
Make sure that the UNIX user that the IBM HTTP server runs as (for example
nobody ), has read permissions on these three files.