Enabling FIPS and TLS for the Apache 2.x plug-in

This section tells you how to copy required files and configure the FIPS-supported redirector plug-in for Apache 2.0. It assumes you have already installed and configured the plug-in for non-FIPS use and updated this installation by following the instructions described in “Adding FIPS and TLS support to the Web server redirector plug-ins”.

  1. Edit the httpd.conf file to load the FIPS-supported redirector module. The following lines illustrate a sample httpd.conf file that supports FIPS and TLS. The only difference from a non-FIPS sample is that the file libjeas2_mod.dll is replaced with libjeas_mod2_f140.dll. For example:

    LoadModule easredirector_module modules/libjeas_mod2_f140.dll
    EASConfigFile WEB_SERVER_HOME\conf\conn_config
    ServerName www.myhost.com
    <LocationMatch /examples/*|/estore/* >
    SetHandler eas-handler
    </LocationMatch>
    
  2. Copy the required libraries. When you initially installed the non-FIPS-supported Apache Web server plug-in, and used WEB_SERVER_HOME as the location of the Apache Web server software, you copied the libraries listed below from your %JAGUAR%\dll directory to the WEB_SERVER_HOME\modules directory:

  3. To support FIPS and TLS you must copy the following libraries from the EAServer\dll subdirectory that was created when you ran the EAServer 5.2 installation program into the WEB_SERVER_HOME\modules directory:

  4. Verify that the Web redirector plug-in still works for your HTTP connections.

  5. Enable FIPS for the redirector plug-in and establish HTTPS connections. See “Managing FIPS for the redirector plug-ins”