Administer > Manage instances > WCS instance


Enable the SSL Accelerator option

An SSL Accelerator (or SSL Terminator) strips off HTTPS encryption at or before the Web server tier in a multitier setup. When using an SSL Accelerator with WebSphere Commerce, you can use the SSL Accelerator option to configure WebSphere Commerce to correctly receive requests that require redirects.


Procedure

  1. Open the WebSphere Commerce configuration file.

  2. Locate the section for the Web module that you are enabling an SSL Accelerator.

    Each Web module in WebSphere Commerce has a configuration section. For example, the Stores Web module:

    <Module contextPath="/webapp/wcs/stores"
            fileServletEnabled="false"
            name="Stores"
            urlMappingPath="/servlet"
            webAlias="/wcsstore">     
    
        <InitParameters adapters="XML/HTTP, BrowserAdapter"
                        contextSetName="Store"
                        handleDoubleClick="true" />
    </Module>
    

  3. Add the following attributes to the InitParameters element:

    For example, to use the default ports that WebSphere Commerce configures for the Stores Web module with an SSL Accelerator, configure WebSphere Commerce following this example:

    <Module contextPath="/webapp/wcs/stores"
            fileServletEnabled="false"
            name="Stores"
            urlMappingPath="/servlet"
            webAlias="/wcsstore">     
    
        <InitParameters adapters="XML/HTTP, BrowserAdapter"
                        contextSetName="Store"
                        handleDoubleClick="true"
                        SSLAcceleratorOption="Enabled" 
                        inSSLPort="443" 
                        inNonSSLPort="80" 
                        outSSLPort="443" 
                        outNonSSLPort="80" />
    </Module>
    

    Where:

    SSLAcceleratorOption

    Set the value to "Enabled" to indicate that an SSL Accelerator is used for that Web module.

    inSSLPort

    The port configured for WebSphere Commerce to receive the SSL data. WebSphere Commerce treats any data received on this port as SSL data even if the scheme says http. The default is port 443.

    inNonSSLPort

    The port configured for WebSphere Commerce to receive the non-SSL data. WebSphere Commerce treats any data received on this port as non-SSL data. The default port is 80.

    outSSLPort

    The port that WebSphere Commerce uses to send out SSL data on a redirect. The default port is 443.

    outNonSSLPort

    The port that WebSphere Commerce uses to send out non-SSL data on a redirect. The default port is 80.

  4. Propagate the changes to the WebSphere Commerce configuration file.

  5. Start the WebSphere Commerce instance if it is not already started.

  6. Run the following command:

      WC_INSTALL/bin/config_ant.sh -DinstanceName=instance UpdateEAR

  7. Restart the WebSphere Commerce instance.

  8. Disable SSL for those ports that no longer need SSL by editing the Web server configuration. For example, if you are using an SSL Accelerator for the Stores Web module, disable SSL for port 443. For the IBM HTTP Server, remove the following directives from the host_name:443 VirtualHost:

    SSLEnable
    SSLClientAuth 0
    

  9. Set the Application Server port preference:

    1. Open the WebSphere Application Server administrative console.

    2. Expand Servers.

    3. Click Web Servers.

    4. Click webserver1 (or the Web Server associated with the WebSphere Commerce application).

    5. Click Plug-in properties.

    6. Click Request and Response.

    7. For the Application server port preference field, select Webserver port

    8. Click OK.

    9. Save the configuration.

    10. Regenerate the Web server plug-in configuration file.

  10. Restart the Web server that WebSphere Commerce is running on.


What to do next

After enabling the SSL Accelerator option, configure the requests being received on port 443 and ensure the Host HTTP header is updated to include the port number. For example, Host: myhost:443.


+

Search Tips   |   Advanced Search