Question & Answer
Question
How do you configure IBM Rational DOORS Web Access (DWA) for secure communication?
Cause
The online instructions for how to set up DWA for secure communication are not clear.
Answer
1. To configure DWA to use secure communication, you need a certificate. You can make one manually for testing purposes or you can purchase one from a trusted certificate authority. You will also need to have a keystore containing the server certificate.
If you purchase a certificate, your certificate vendor should provide instructions on how to install your certificate into Tomcat. If you have issues following your vendor's instructions to install your certificate into Tomcat, please contact your vendor for support.
If you are generating your own certificate for testing purposes, you can create and manage a keystore using the standard Java key tool facilities as documented on the Sun web site. In addition to the Sun documentation, there are many resources available on the internet that can help you with creating your own certificate and installing it into Tomcat.
Add the bolded lines to the SSL HTTP/1.1 Connector on port 8443 in the server.xml file located in the <DWAHOME>\server\conf directory:
<Connector port="8443“ maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25“
MaxSpareThreads="75“ enableLookups="false"
disableUploadTimeout="true“ acceptCount="100"
scheme="https" secure="true“ clientAuth="false" sslProtocol="TLS"
keystoreFile="C:\Server\keystore.ks"
keystorePass="password"
algorithm="IbmX509"
/>
2. Then follow the instructions in the "Configuring Rational DOORS Web Access to use SSL" section of the DOORS Information Center to set up DWA to use HTTPS (SSL).
Note: The SSLEnabled="true" parameter should be contained within the HTTPS connector.
3. Last, follow the steps in the "Configuring the Rational DOORS database server" section from the DOORS Information Center to configure the DOORS server to start communicating with DWA securely. Ensure that you have the "dwaProtocol" set to https, the "dwaHost" set to your DWA server and the "dwaPort" set to 8443. Once this is complete, you can follow the standard instructions to start DWA. Once all the components are started, try logging in from:
https://[yourdwaserver]:8443/dwa
Was this topic helpful?
Document Information
Modified date:
01 May 2020
UID
swg21574687