HTTP and Web server configuration and security.
Robert Rogerson <[email protected]>
| Newsgroups | gmane.comp.systems.as400.web |
|---|---|
| Message-ID | <CAB_EQWsrmnRP0bM8kKE8PzS7evPm0A498yPZ0oYPk3PWPvEqmw@mail.gmail.com> |
I was able to create an HTTP and web services servers from the wizard. I then created an api. I was able to test it with Postman and everything checked out. The next thing I'm unsure of is security. I created a new user with *USER authority and no special authority I also changed the initial menu to signoff. I redeployed the web service speciying this user profile on User ID for this service. I retested with Postman and it still works. I ended my vpn. The api now timed out in Postman. So my question is, if the api is only ever called from behind the vpn is there still a big hole I'm missing? Is SSL required if behind a vpn? Once again, your advice is very much appreciated. Thanks, Rob -- This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list To post a message email: [email protected] To subscribe, unsubscribe, or change list options, visit: https://lists.midrange.com/mailman/listinfo/web400 or email: [email protected] Before posting, please take a moment to review the archives at https://archive.midrange.com/web400.