Adjust SSL ciphers in IBM HTTP Server

Customize SSL ciphers on IBM IHS.

Author(s): Tamas Bures | Created: 18 July 2019 | Last modified: 21 December 2024
Tested on: -

Adjust SSL ciphers in IBM HTTP Server

  1. Open the <IHS/Apache install dir>/conf/httpd.conf file with a text editor.

  2. Locate the SSL virtual host in your config file:

     Listen 443
 <VirtualHost *:443>
     ServerName ihs.ibm.hu
     DocumentRoot "/opt/IBM/WebSphere/HTTPServer/htdocs"
     ErrorLog logs/ssl_error.log
     LogLevel Debug
     SSLEnable
     SSLClientAuth None
     SSLServerCert ihs_wildcard_cert
     ...
 </VirtualHost>

  3. Adjust the ciphers with the following keyword inside teh <VirtualHost> definition:

     SSSLCipherSpec <cipher name> (for example: TLSv12 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256)

  4. Save the changes when you are done and restart the server.