SSL for ODWEK CGI 7.1.0.12 (or upgrade path suggestions)

[jaronwho]

Looking for assistance.  We serve multiple Content OnDemand ODWEK CGI websites where we store thousands of PDFs that are indexed and loaded by OnDemand, that our customers access via these sites.  We have a requirement for SSL (https) now.

Platform: Windows Server 2003
ARCHIVE databases:  Microsoft SQL Server 2005
IBM Content Manager onDemand for Multiplatforms version:  7.1.0.12

Can any experts here kindly give me an overview of whether or not this is possible (I don't think it is based on chapter 63 in this document:  http://pic.dhe.ibm.com/infocenter/cmod/v9r0m0/index.jsp?topic=%2Fcom.ibm.ondemand.installingmp.doc%2Fars1i071613.htm)

I am looking for a recommended path.  We cannot upgrade the Windows Server 2003 or SQL2005 at this time.  It looks like we need to upgrade COD and perhaps start using a ODWEK java as well.   We do not want our many configured PDF indexes to be effected in the upgrade obviously as we have hundreds of reports.

PLEASE advise ... I'm looking for an expert with experience who can at the least anecdotally, from experience share some best practices, course of action from experience...not necessarily out of the manual only.  Support for this product has long since sunsetted.

Any help, input is greatly appreciated!!

Thank you!

Jonathan Aronson
jonathan.aronson@calwin.org

[Justin Derrick]

Since you're using the CGI, you simply need to implement HTTPS at the web server level -- then all data passed between the web browser and the web server will be encrypted.

You didn't mention which webserver software you're using, but simply follow the instructions for enabling HTTPS/SSL for that software.

Also, upgrading won't affect the indexes for your PDF.

-JD.

[Alessandro Perucchi]

Hello Johnathan,

Just a side aspect of the SSL aspect.

1) Connection between ODWEK and the Browser

For that, Justin has given the answer, by using HTTPS, and apparently you also are using it.

2) Connection between CMOD Server and ODWEK

For that, you MUST upgrade to at least CMOD 8.5, and then you can have a secured connection between CMOD Server and ODWEK.
At the moment you are at version 7.1 from CMOD which is no longer supported since at least 3 or 5 years. The actual supported version is 8.5+
(I don't talk about Version 8.4.X because they will be out of support at the end of this month).

And another point, you cannot use SSL between CMOD Server and the CGI, the CGI wasn't update to allow that feature, and in all cases in CMOD V9 the CGI component of ODWEK was deprecated.
So you will need to find a substitute in a near future.



That said.

In order to go to a supported version (8.5+) you must upgrade Windows to a 64bit platform. Since 8.5+ is 64bit only on Windows (it was already 64bit in all other platform). So meaning to use the SSL you must upgrade first Windows... and apparently you cannot do that.

So my advice would be to go at least to the latest 8.4.1.X version (even if it not supported anymore).
Start looking to replace the CGI to a java alternative (with the Java API from ODWEK), so you can just modify the code in order to use the new SSL feature.
When you can finally upgrade your box to a Windows 64bits, then you will just need to upgrade from 8.4.1.X to 8.5+ (or even better 9.X), and your code in java should have only a few modification to allow SSL.

If I remember correctly, you will need to have a middle migration step.
Meaning that you must upgrade at least to version 7.1.2.8, do the upgrade steps.
Then you can go "directly" to 8.4.1.8 (which is the latest version on 8.4.1.X)


I hope I've answered your concerned,
If not, please tell me what I've missed :-D

Sincerely yours,
Alessandro