X.509 ÀÎÁõ »ç¿ë

WebSphere Commerce ÀνºÅϽº¸¦ ÀÛ¼ºÇÒ ¶§ ±¸¼º °ü¸®ÀÚ¸¦ »ç¿ëÇÏ¿© ±âº» ÀÎÁõ ¶Ç´Â X.509 ÀÎÁõÀ» ¼±ÅÃÇß½À´Ï´Ù. ±âº»°ªÀº ±âº» ÀÎÁõÀ¸·Î, ·Î±×ÀÎ ID¿Í ¾ÏÈ£ÀÔ´Ï´Ù.

X.509 ÀÎÁõÀ» »ç¿ëÇÏ·Á¸é ´ÙÀ½À» ¼öÇàÇϽʽÿÀ.

  1. IBM HTTP Web server SSL ÀÎÁõÀ» ¼³Ä¡ÇϽʽÿÀ. SSL ¼­¹ö ÀÎÁõ¿¡´Â ½Å·Ú °ü°è¿¡ ´ëÇÑ Å¬¶óÀÌ¾ðÆ® ±ÇÇÑ ¸ñ·ÏÀÌ Æ÷ÇԵ˴ϴÙ. Ãß°¡ Ŭ¶óÀÌ¾ðÆ® ÀÎÁõ ±â°üÀ» Ãß°¡ÇØ¾ß ÇÒ ¼öµµ ÀÖ½À´Ï´Ù.
  2. ±¸¼º °ü¸®ÀÚ¸¦ ¿©½Ê½Ã¿À.
  3. ÀνºÅϽº µî·Ï Á¤º¸ -> WebServer¸¦ ¼±ÅÃÇϽʽÿÀ.
  4. ÀÎÁõ ¸ðµå¿¡ ´ëÇØ X.509¸¦ ¼±ÅÃÇϽʽÿÀ. Àû¿ëÀ» ´©¸£½Ê½Ã¿À.
    ÀÌÁ¦ X.509 Ŭ¶óÀÌ¾ðÆ® ÀÎÁõ »ç¿ëÀÚ°¡ Çã¿ëµË´Ï´Ù. X.509 ÀÎÁõ ¸ðµå°¡ ¼±ÅÃµÈ °æ¿ì IBM HTTP Server°¡ ÀÎÁõ Áö¿øÀ» À§ÇØ ÀÚµ¿À¸·Î »ç¿ë °¡´ÉÇÏ°Ô µË´Ï´Ù.
  5. WebSphere Commerce Server ½ÃÀÛ ¹× ÁßÁöÇϽʽÿÀ.
    WebSphere Commerce´Â ¼­¹ö¸¦ ´Ù½Ã ½ÃÀÛÇÒ ¶§±îÁö X.509 »ç¿ëÀÚ¸¦ CERT_X509 Å×ÀÌºí¿¡ µî·ÏÇÏÁö ¾Ê½À´Ï´Ù.

ÁÖ: X.509 ÀÎÁõ¼­¸¦ ¼±Åà ¶Ç´Â Çʼö·Î ÁöÁ¤Çϵµ·Ï IBM HTTP Server¸¦ ±¸¼ºÇÒ ¼ö ÀÖ½À´Ï´Ù.

  1. ±¸¼º ÆÄÀÏ httpd.conf¸¦ ¿­°í SSLClientAuth Áö½Ã¹®À» ãÀ¸½Ê½Ã¿À. Áö½Ã¹®À» 1(¼±ÅÃÀû) ¶Ç´Â 2(Çʼö)·Î ¼³Á¤ÇϽʽÿÀ. ±ÇÀåµÇ´Â ¸Å°³º¯¼ö´Â ÇʼöÀÔ´Ï´Ù.
  2. Payment Manager Ŭ¶óÀÌ¾ðÆ®´Â SSL Ŭ¶óÀÌ¾ðÆ® ÀÎÁõÀ» Áö¿øÇÏÁö ¾ÊÀ¸¹Ç·Î Payment Manager Ŭ¶óÀÌ¾ðÆ®¿Í À¥ ¼­¹ö »çÀÌÀÇ SSLÀ» »ç¿ë °¡´ÉÇÏÁö ¾Ê°Ô ÇØ¾ß ÇÕ´Ï´Ù.
    1. ÅØ½ºÆ® ÆíÁý±â¿¡¼­ PaymentServlet.properties ÆÄÀÏÀ» ¿©½Ê½Ã¿À. ÀÌ ÆÄÀÏÀº Payment Manager ¼³Ä¡ µð·ºÅ丮¿¡ ÀÖ½À´Ï´Ù.
      • UseNonSSLWCSClient Ư¼ºÀ» ãÀ¸½Ê½Ã¿À. Ư¼ºÀ» 1·Î ¼³Á¤ÇϽʽÿÀ.
      • ÆÄÀÏ¿¡¼­ UseNonSSLWCSClient Ư¼ºÀ» ãÀ» ¼ö ¾ø´Â °æ¿ì,
        UseNonSSLWCSClient=1  ÇàÀ» Ãß°¡ÇϽʽÿÀ.
    2. ÆÄÀÏÀ» ÀúÀåÇÏ°í ÆíÁý±â¸¦ Á¾·áÇϽʽÿÀ.
  3. Payment Manager°¡ WebSphere Commerce¿Í µ¿ÀÏÇÑ ½Ã½ºÅÛ¿¡ ¼³Ä¡µÇ¾î ÀÖ´Â °æ¿ì:
    1. ±¸¼º °ü¸®ÀÚ¸¦ ¿©½Ê½Ã¿À.
    2. ÀνºÅϽº¸¦ ¼±ÅÃÇÑ ´ÙÀ½, Payment Manager¸¦ ¼±ÅÃÇϽʽÿÀ.
    3. ºñ SSL Payment Manager Ŭ¶óÀÌ¾ðÆ® »ç¿ëÀ» ¼±ÅÃÇϽʽÿÀ. ±×·¯¸é, WebSphere Commerce Server Ŭ¶óÀÌ¾ðÆ®°¡ SSLÀ» »ç¿ëÇÏÁö ¾Ê°í Payment Manager¿Í Åë½ÅÇÒ ¼ö ÀÖ½À´Ï´Ù.
    4. Àû¿ëÀ» ´©¸£½Ê½Ã¿À.
    5. ±¸¼º °ü¸®ÀÚ¸¦ ´ÝÀ¸½Ê½Ã¿À.
  4. WebSphere °ü¸® Äֿܼ¡¼­ WebSphere Payment Manager Application Server¸¦ ´Ù½Ã ½ÃÀÛÇϽʽÿÀ.
  5. WebSphere °ü¸® Äֿܼ¡¼­ WebSphere Commerce ÀÀ¿ëÇÁ·Î±×·¥À» ´Ù½Ã ½ÃÀÛÇϽʽÿÀ.

ÁÖ: X.509 ÀÎÁõ¼­¸¦ ¼±Åà ¶Ç´Â Çʼö·Î ÁöÁ¤Çϵµ·Ï IBM HTTP Server¸¦ ±¸¼ºÇÒ ¼ö ÀÖ½À´Ï´Ù ¸í·ÉÇà¿¡¼­ wrkhttpcfg <instance_name>À» ÀÔ·ÂÇϰí SSLClientAuth Áö½Ã¹®À» ãÀ¸½Ê½Ã¿À. ¸Å°³º¯¼ö¸¦ Çʼö ¶Ç´Â ¼±ÅÃÀ¸·Î ¼³Á¤ÇϽʽÿÀ. ±âº»°ªÀÎ Çʼö¸¦ ±ÇÀåÇÕ´Ï´Ù.

ÀÎÁõ¿¡ ´ëÇÑ Á¦ÇÑ»çÇ× ¼³Á¤°ú ¸Å°³º¯¼ö ÇÊÅ͸µ¿¡ °üÇÑ Ãß°¡ Á¤º¸ ¹× Ãß°¡ ¿É¼ÇÀº IBM HTTP Server ¹®¼­¸¦ ÂüÁ¶ÇϽʽÿÀ.

°ü·Ã °³³ä

IBM copyright