Installation guide

Configuring HTTPS support for Web server plug-ins
62 EAServer
Testing your HTTPS connections
Once you have installed the required files and configured the Web server
redirector plug-in to use HTTPS, you can test your connection to EAServer by
sending HTTPS requests to a default HTTPS listener (for example, port 8081).
Port 8081 is an HTTPS port that uses the Sample1 user certificate, which is
signed by the Jaguar User Test CA. The Jaguar User Test CA is trusted by
EAServer and installed on the Web server host as part of the installation.
Sending HTTPS requests to port 8081ensures that your Web server redirector
is configured correctly. You can then define HTTPS connections for a
production environment following the steps described in “Manage certificates
for HTTPS connections.”
Manage certificates for HTTPS connections
To establish an HTTPS connection between your Web redirector and
EAServer, you must export the CA certificate (the signing authority’s
certificate) that signs the user certificate for the HTTPS listener to which you
want to connect. For example, if Verisign Class 1 Primary CA is the signer of
the web_redirector_certificate that is assigned to an EAServer listener at port
8085, then you must install the Verisign Class 1 Primary CA certificate on your
Web server host and mark it trusted for your redirector to connect to that
EAServer listener.
There are several ways to export and install certificates. This procedure
describes how to export a CA certificate from EAServer, install it on your Web
server host, and mark it trusted using Security Manager:
❖ Exporting and installing CA certificates
1 Use Security Manager on the EAServer host to export the root certificate
of the certificate associated with the HTTP protocol listener:
a Select the CA Certificates folder.
b Locate the CA certificate of the EAServer certificate associated with
the HTTP listener.
c Highlight the certificate to export. This example uses Verisign Class
1 Primary CA.
d Select File | Export Certificate.