Adjust SSL ciphers in IBM HTTP Server

Customize SSL ciphers on IBM IHS.


Author(s): Tamas Bures | Created: 18 July 2019 | Last modified: 25 June 2022
Tested on: -

Adjust SSL ciphers in IBM HTTP Server

  1. Open the <IHS/Apache install dir>/conf/httpd.conf file with a text editor.

  2. Locate the SSL virtual host in your config file:

     Listen 443
     <VirtualHost *:443>
         ServerName ihs.ibm.hu
         DocumentRoot "/opt/IBM/WebSphere/HTTPServer/htdocs"
         ErrorLog logs/ssl_error.log
         LogLevel Debug
         SSLEnable
         SSLClientAuth None
         SSLServerCert ihs_wildcard_cert
         ...
     </VirtualHost>
  3. Adjust the ciphers with the following keyword inside teh <VirtualHost> definition:

     SSSLCipherSpec <cipher name> (for example: TLSv12 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256)
  4. Save the changes when you are done and restart the server.