solaris8+apache2+weblogic813+128 ssl证书 SUN安装过程( 二 )


commonName :PRINTABLE:"acmail.wiscom.com.cn"
emailAddress :IA5STRING:"acmail@wiscom.com.cn"
Certificate is to be certifIEd until Jul 16 12:55:34 2005 GMT (365 days)
Sign the certificate? [y/n]:y
1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated
CA verifying: server.crt <-> CA cert
server.crt: OK
(如果这里出现错误,最好重新来过,删除ssl.ca-0.1这个目录,从解压缩处重新开始 。)

下面要按照ssl.conf里面的设置,将证书放在适当的位置 。
# chmod 400 server.key
# cd ..
# mkdir ssl.key
# mv ssl.ca-0.1/server.key ssl.key
# mkdir ssl.crt
# mv ssl.ca-0.1/server.crt ssl.crt

然后就可以启动啦!
# cd /usr/local/apache2
# ./bin/apachectl startssl


4、安装weblogic 软件:weblogic 813
重要声明:weblogic 812以前的版本不支持ssl 128位加密,只有weblogic 813以后的版本支持ssl 128位加密

安装bea软件:server813_solaris32.bin

创建server:
/export/home/bea/weblogic81/common/bin/config.sh

三、整合apache2和weblogic813

1、修改apache2配置文件httpd.conf
修改启动组:Group nobody
ServerName 192.0.0.188

2、拷贝so文件:
cd /usr/local/apache2/modules
cp /export/home/bea/weblogic81/server/lib/solaris/mod_wl128_20.so .
vi httpd.conf
LoadModule weblogic_module modules/mod_wl128_20.so
#
LoadModule ssl_module modules/mod_ssl.so
#


3、添加weblogic连接文件:

SetHandler weblogic-handler



WebLogicHost 127.0.0.1
WebLogicPort 7001
MatchExpression *.jsp
ConnectTimeoutSecs 60

4、配置域名解析
vi /etc/resolv.conf
nameserver 211.94.69.34
vi /etc/nsswitch.conf
hosts: files dns
备注:
报错信息:start: .[Tue Mar 01 21:15:30 2005] [crit] [Tue Mar 01 21:15:30 2005] file vhost.c, line 189, assertion "rv ==

APR_SUCCESS" failed
解决方法:把/etc/resolv.conf和/etc/nsswitch.conf做了相应的改动后,就ok了

5、添加证书:配置ssl证书:我们买的是verisign的128位ssl证书 。
vi ssl.conf
#SSLCertificateFile /usr/local/apache2/public.crt
#SSLCertificateKeyFile /usr/local/apache2/private.key
#SSLCertificateChainFile /usr/local/apache2/intermediate.crt

四、DB2数据库客户端安装:
1、安装db2数据库for solaris 64为客户端:
修改系统参数/etc/system
set msgsys:msginfo_msgmax = 65535
set msgsys:msginfo_msgmnb = 65535
set msgsys:msginfo_msgssz = 32
set msgsys:msginfo_msgseg = 32767
set msgsys:msginfo_msgmap = 2562
set msgsys:msginfo_msgmni = 2560
set msgsys:msginfo_msgtql = 2560
set semsys:seminfo_semmap = 3074
set semsys:seminfo_semmni = 3072
set semsys:seminfo_semmns = 6452
set semsys:seminfo_semmnu = 3072
set semsys:seminfo_semume = 600
set shmsys:shminfo_shmmax = 2134020096
set shmsys:shminfo_shmmni = 3072
set shmsys:shminfo_shmseg = 600

2、数据库客户端安装:
/soft/076_ADCL_SUN_3264_NLV/adcl/db2setup
注意:选择32位的客户端就可以!

1、db2 catalog tcpip node dbnode remote 192.0.0.160 server 50001
db2 terminate
db2 catalog database mbidb2 as mbidb2 at node dbnode
db2 terminate
2、 db2连接
db2 connect to mbidb21 user db2inst1 using passWord
3、db2客户端问题解决:

db2set DB2CODEPAGE=1383
报错问题解决:
$ db2 connect to mbidb26 user db2inst1 using password
SQL0 2N There is no available conversion for the source code page "1383" to
the target code page "819". Reason Code "1". SQLSTATE=57017
$
解决方法:
db2set DB2CODEPAGE=1383

备注:有错之处希望大家指正!

推荐阅读