IWS, Rest API, and HTTPS

I apologize in advance if this topic has been covered in ad nauseum...  We have a simple Rest API that is currently running in IWS within the firewall of the company.  We'd like to open it up to outside of the confines and want to run in a more secure way.

What are the high level steps to make this happen?  We are currently on the latest TL of 7.3 of the OS.  Is there a white paper on this?

Other questions that come to mind...


  1.  Would we create a new Certificate Store in DCM?  Can we create a certificate for client side there?  Or do we need to create and purchase cert from 3rd party?
  2.  I believe the suggested method of comms is via TLS 1.2 or higher.  Is that a different setup?
  3.  Do we create a new Web Service Server and deploy this web service to it or can it be 'reconfigured'?

Thanks for any suggestions!!
-- 
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.