Working with SSL - Revision history

Sichen at 19:51, 25 January 2010

2010-01-25T19:51:26Z

Sichen: /* Using Your JKS = */

2009-04-24T22:36:29Z

‎Using Your JKS =

Sichen at 22:35, 24 April 2009

2009-04-24T22:35:10Z

Sichen at 22:32, 24 April 2009

2009-04-24T22:32:10Z

Sichen at 00:04, 24 April 2009

2009-04-24T00:04:33Z

Sichen at 21:57, 20 April 2009

2009-04-20T21:57:56Z

Sichen at 21:57, 20 April 2009

2009-04-20T21:57:43Z

Sichen: /* Converting PEM to JKS Private Key */

2009-04-20T21:57:29Z

‎Converting PEM to JKS Private Key

Sichen: Protected "Working with SSL": Sysop page [edit=sysop:move=sysop]

2009-04-20T18:31:54Z

Protected "Working with SSL": Sysop page [edit=sysop:move=sysop]

Sichen: New page: === Converting PEM to JKS Private Key === * key.pem is the private SSL key * cert.pem is the certificate for the SSL key

 $ openssl pkcs8 -topk8 -nocrypt -in key.pem -inform PEM -out...

2009-04-20T18:31:53Z

New page: === Converting PEM to JKS Private Key === * key.pem is the private SSL key * cert.pem is the certificate for the SSL key <pre> $ openssl pkcs8 -topk8 -nocrypt -in key.pem -inform PEM -out...

New page

=== Converting PEM to JKS Private Key ===
* key.pem is the private SSL key
* cert.pem is the certificate for the SSL key

<pre>
$ openssl pkcs8 -topk8 -nocrypt -in key.pem -inform PEM -out key.der -outform DER

$ openssl x509 -in cert.pem -inform PEM -out cert.der -outform DER

$ javac ImportKey.java

$ java ImportKey key.der cert.der
Using keystore-file : /home/user/keystore.ImportKey
One certificate, no chain.
Key and certificate stored.
Alias:importkey Password:importkey

$ keytool -keystore keystore.ImportKey -storepass
Enter keystore password:
New keystore password:
Re-enter new keystore password:
</pre>

← Older revision		Revision as of 19:51, 25 January 2010
Line 1:		Line 1:
		+	__TOC__
		+
	=== Generating a Self Signed JKS Key ===		=== Generating a Self Signed JKS Key ===

@@ Line 55: / Line 55: @@
 ImportKey.java can be obtained from number of sites online, including [http://www.agentbob.info/agentbob/79-AB.html agentbob.info]
-=== Using Your JKS ====
+=== Using Your JKS ===
 Once you have a JKS, either self signed or converted from a PEM, edit the file <tt>framework/base/config/ofbiz-containers.xml</tt>  and put in the location of your .jks file and the password.  Note that you can put the JKS file in the <tt>hot-deploy/</tt> component for your own company, instead of <tt>framework/base/config/</tt>

← Older revision		Revision as of 22:35, 24 April 2009
Line 53:		Line 53:
	</pre>		</pre>

−	ImportKey.java can be obtained from [http://www.agentbob.info/agentbob/79-AB.html agentbob.info]	+	ImportKey.java can be obtained from number of sites online, including [http://www.agentbob.info/agentbob/79-AB.html agentbob.info]
		+
		+	=== Using Your JKS ====
		+
		+	Once you have a JKS, either self signed or converted from a PEM, edit the file <tt>framework/base/config/ofbiz-containers.xml</tt> and put in the location of your .jks file and the password. Note that you can put the JKS file in the <tt>hot-deploy/</tt> component for your own company, instead of <tt>framework/base/config/</tt>

← Older revision		Revision as of 22:32, 24 April 2009
Line 1:		Line 1:
	=== Generating a Self Signed JKS Key ===		=== Generating a Self Signed JKS Key ===
		+
		+	You can create your own self signed SSL to use with opentaps. To do so, use the keytool command. Note that "first and last name" should be the name of your server. For example, if you access your server as
		+	http://localhost
		+	or
		+	http://localhost:8080
		+
		+	Then it should be <tt>localhost</tt> If you use <tt>opentaps.mycompany.com</tt>, then put that as the answer to "first and last name"

	<pre>		<pre>

← Older revision		Revision as of 00:04, 24 April 2009
Line 1:		Line 1:
		+	=== Generating a Self Signed JKS Key ===
		+
		+	<pre>
		+	$ keytool -genkey -alias opentaps -keyalg RSA -keystore framework/base/config/opentaps.jks
		+	Enter keystore password: opentaps
		+	What is your first and last name?
		+	[Unknown]: localhost
		+	What is the name of your organizational unit?
		+	[Unknown]: Si Chen
		+	What is the name of your organization?
		+	[Unknown]: Open Source Strategies, Inc.
		+	What is the name of your City or Locality?
		+	[Unknown]: Los Angeles
		+	What is the name of your State or Province?
		+	[Unknown]: CA
		+	What is the two-letter country code for this unit?
		+	[Unknown]: US
		+	Is CN=localhost, OU=Si Chen, O="Open Source Strategies, Inc.", L=Los Angeles, ST=CA, C=US correct?
		+	[no]: yes
		+
		+	Enter key password for <opentaps>
		+	(RETURN if same as keystore password): opentaps
		+	</pre>
		+
	=== Converting PEM to JKS Private Key ===		=== Converting PEM to JKS Private Key ===
	* key.pem is the private SSL key		* key.pem is the private SSL key

← Older revision		Revision as of 21:57, 20 April 2009
Line 22:		Line 22:
	</pre>		</pre>

−	ImportKey.java can be obtained from [http://www.agentbob.info/agentbob/79-AB.html agentbob.~~com~~]	+	ImportKey.java can be obtained from [http://www.agentbob.info/agentbob/79-AB.html agentbob.info]

← Older revision		Revision as of 21:57, 20 April 2009
Line 21:		Line 21:
	Re-enter new keystore password:		Re-enter new keystore password:
	</pre>		</pre>
		+
		+	ImportKey.java can be obtained from [http://www.agentbob.info/agentbob/79-AB.html]

← Older revision	Revision as of 18:31, 20 April 2009
(No difference)