Enabling FIPS and TLS for Netscape 6.1, or iPlanet 4.0 and 6.0 plug-ins

This section tells you how to copy required files and configure the FIPS-supported redirector plug-in for Netscape 6.1, or iPlanet 4.0 and 6.0. It assumes you have already installed and configured the plug-in for non-FIPS use and updated this installation by following the instructions described in “Adding FIPS and TLS support to the Web server redirector plug-ins”.

1. Edit the obj.conf file to load the FIPS-supported redirector module. The following lines illustrate a sample obj.conf file that supports FIPS and TLS. The only difference from a non-FIPS sample is that the file libjeas_httpd40.dll (iPlanet) or libjeas_httpd60.dll (Netscape) is replaced with libjeas_httpd40_f140.dll (iPlanet 4.0 and 6.0) or libjeas_httpd60_f140.dll (Netscape 6.1). For example:

   • iPlanet:

     Init fn="load-modules" shlib="WEB_SERVER_HOME/bin/https/libjeas_httpd40_f140.dll"
     funcs="conn_init,conn_service" 
     
     Init fn="conn_init"
     configfile="c:/webserver/https-neptune/config/conn_config"
     

   • Netscape:

     Init fn="load-modules" shlib="WEB_SERVER_HOME/bin/https/libjeas_httpd60_f140.dll"
     funcs="conn_init,conn_service" 
     
     Init fn="conn_init"
     configfile="c:/webserver/https-neptune/config/conn_config"
     

2. Copy the required libraries. When you initially installed the non-FIPS-supported Netscape or iPlanet Web server plug-in, and used WEB_SERVER_HOME as the location of the Web server software, you copied the libraries listed below from your %JAGUAR%\dll directory to the WEB_SERVER_HOME\bin\https directory:

   • libjcc.dll

   • libjctssecct.dll

   • libjeas_httpd60.dll (Netscape 6.1), or libjeas_httpd40.dll (iPlanet 4.0 and 6.0)

   • libjintl.dll

   • libjspks.dll

   • libjsybscl.dll

   • libjtml.dll

   • libjutils.dll

   • nlwnsck.dll

   • nlwnsck64.dll

   • To support FIPS and TLS you must copy the following libraries from the EAServer\dll subdirectory that was created when you ran the EAServer 5.2 installation program into the WEB_SERVER_HOME\bin\https directory:

     • libjctssecct_f140.dll

     • libjsbgpks.dll

     • libjeas_httpd60_f140.dll (Netscape version 6.1 FIPS-supported library) or libjeas_httpd40_f140.dll (iPlanet version 4.0 and 6.0 FIPS-supported library)

     • defaultmem.dll

     • libsb.dll

   • Verify that the Web redirector plug-in still works for your HTTP connections.

   • Enable FIPS for the redirector plug-in and establish HTTPS connections. See “Managing FIPS for the redirector plug-ins”

Copyright © 2005. Sybase Inc. All rights reserved.

View this book as PDF