Installation guide

Adding FIPS and TLS support to the Web server redirector plug-ins

EAServer

Enabling FIPS and TLS for an Apache plug-in

This section explains how to copy required files and configure the FIPS-

supported redirector plug-in for Apache. It assumes you have already installed

and configured the plug-in for non-FIPS use and updated this installation by

following the instructions described in “Adding FIPS and TLS support to the

Web server redirector plug-ins” on page 64.

1 Edit the httpd.conf file to load the FIPS-supported redirector module. The

following lines illustrate a sample httpd.conf file that supports FIPS and

TLS. The only difference from a non-FIPS sample is that the file

libjeas2_mod.so is replaced with libjeas2_mod_f140.so. For example:

LoadModule easredirector_module libexec/libjeas2mod_f140.so

EASConfigFile WEB_SERVER_HOME/conf/conn_config

ServerName www.myhost.com

SetHandler eas-handler

</LocationMatch>

2 Copy the required libraries. When you initially installed the non-FIPS-

supported Apache Web server plug-in, and used WEB_SERVER_HOME

as the location of the Apache Web server software, you copied the libraries

listed below from your $JAGUAR/lib directory to the

WEB_SERVER_HOME/libexec directory:

• libjcc.so

• libjctssecct.so

• libjeas_mod.so (for Apache version 1.3.26) or libjeas2_mod.so (for

Apache version 2.0)

• libjeaseapi_mod.so

• libjeasproxy_mod.so

• libjeasproxyeapi_mod.so

• libjinsck_r.so

• libjintl_r.so

• libjjnirt.so

• libjlog.so

• libjsybscl_r.so

• libjtli_r.so