Two certificate passwords are created by default as “sybase” from InstallShield
during installation. You can change these from Sybase Central later.
SSL is configured automatically using the Configuration Utility from InstallShield or from Sybase Central. However, you can also configure SSL manually. To manually configure SSL for ASE Web Services, run the configssl script, which can be found in the bin directory:
configssl -d <domain_hostName> -k <keystore> -h <httpsPort> -f <property_file> -c <certificate_password> -s <keystore_password>
where:
domain_hostName – is
the host name of the URL to connect to using SSL. For example, the domain_hostName for
the following URL would be mydomainhostname:
http://mydomainhostname:8183/services/ase
There is no default for this parameter value.
keystore – is the location and file at which to store certificates. The default location for UNIX is $SYBASE/WS-15_0/props/keystore, or %SYBASE%\WS-15_0\props\keystore for Windows.
httpsPort – is the port on which to listen for an SSL connection. The default is 8182.
property_file – is the location and name of the properties file to update. The default location for UNIX is $SYBASE/WS-15_0/props/ws.properties, or %SYBASE%\WS-15_0\props\ws.properties for Windows.
certificate_password – is the password for the certificate. There is no default for this parameter value. If no password is supplied when the script is invoked, the script will prompt for a value.
keystore_password – is the password for the keystore. There is no default for this parameter value. If no password is supplied when the script is invoked, the script will prompt for a value.
You can also add your own certificate for SSL. For instructions
on how to add your own certificate, see the documentation for the keytool utility
in the JRE that manipulates the keystore file.
The JRE delivered with ASE Web Services is version 1.4.
The WS.properties file sets the keystore location with com.sybase.ase.ws.producer.ssl.keystore. The WS Producer is the only user of the keystore location. The WS Consumer uses a separate certificate, which is located in the JRE by default. To consume Webservices over HTTPS (SSL) as a WS consumer, import the Producer’s SSL certificate into the keystore for the JRE (for example, with $SYBASE/$SYBASE_JRE6_64/lib/security/cacerts
