COGNOiSe.com - The IBM Cognos Community

IBM Cognos Analytics Platform => Cognos Analytics => Administration and Security => Topic started by: RiRo on 21 Apr 2021 02:14:23 AM

Title: Import SSL certificates
Post by: RiRo on 21 Apr 2021 02:14:23 AM
Hello community!

I am forced to run Cognos V11(including Websphere Liberty) in co-existance with a WAS 8.5 server.

The WAS 8.5 has a SSL communication enabled, with a signed certificate from an external CA.

What I want to do is, to run Cognos on a alternative Port e.g. 16317 and import the certificate from WAS 8.5 to the Cognos Websphere Liberty, to have also a SSL communication enabled.

So my question is, how can I import this certificate?
Which certs, keyfiles, passwords do I need from the WAS?

I'm not sure if this is a silly idea or if that is possible  :-\

Thanks for your advice.

Robert
Title: Re: Import SSL certificates
Post by: MFGF on 21 Apr 2021 07:19:04 AM
Quote from: RiRo on 21 Apr 2021 02:14:23 AM
Hello community!

I am forced to run Cognos V11(including Websphere Liberty) in co-existance with a WAS 8.5 server.

The WAS 8.5 has a SSL communication enabled, with a signed certificate from an external CA.

What I want to do is, to run Cognos on a alternative Port e.g. 16317 and import the certificate from WAS 8.5 to the Cognos Websphere Liberty, to have also a SSL communication enabled.

So my question is, how can I import this certificate?
Which certs, keyfiles, passwords do I need from the WAS?

I'm not sure if this is a silly idea or if that is possible  :-\

Thanks for your advice.

Robert

It's not something I have ever done, so I can't give you any first-hand experience here, sorry. A good place to start is with the documentation, though:

https://www.ibm.com/docs/en/cognos-analytics/11.1.0?topic=options-configuring-ssl-protocol-cognos-analytics-components

Good luck!

MF.
Title: Re: Import SSL certificates
Post by: RiRo on 21 Apr 2021 07:52:21 AM
Thank you for your answer!

Here is my problem, because the documentation presupposes for an external CA to create a CSR.

But in this special case, there was made a CSR in the past and the external authority resend the certificate for the WAS 8.5.
On this WAS 8.5. SSL is successfully enabled.

But now I want to catch that certificate and want to cram it in the keystore of Cognos V11 (Liberty)
I think there are other steps, which should be made, that this works.

Regards
Robert