![]() ![]() Openssl pkcs12 -export -in all.crt -inkey SSLCertificateKeyFile.key -name s1as -passout pass:changeit > keystore.p12 cat SSLCertificateFile.crt SSLCACertificateFile.crt > all.crt We will prepend them with certificate for our domain. The SSLCACertificateFile.crt already contains certifcate chain (root and intermediate certificates). ![]() Keytool -list -v -keystore cacerts.jks | grep s1as Put SSL componenets into Java keystore Verify that it has been deleted: keytool -list -v -keystore keystore.jks | grep s1as Keytool -delete -alias s1as -keystore cacerts.jks Keytool -delete -alias s1as -keystore keystore.jks We will delete it from keystore.jks and cacerts.jks. cd $GLASSFISH_HOME/glassfish/domains/domain1/config Glassifish is by default using s1as certificate alias. =$/config/cacerts.jksĪbove you can see where Java is looking for the keystores. The files are saved in cd $GLASSFISH_HOME/glassfish/domains/domain1/config (can be any other location that you’ll use consequently). CA certificate bundle = SSLCACertificateFile.crt.We have already generated key in cPanel so will not repeat this step. > Glassfish 4848 (SSL certificate) Review and backup existing keystore > Apache 443 (SSL certificate) -> Glassfish 8080 You can have the same certificate installed in Apache and Glassfish but use it for different ports depending on where it has been installed. In this example we will use typical Apache format certificate fileset i.e. key file, certificate file and CA certificate bundle. ![]() Glassfish 4 ssl certificate install#In this case you will need to install the certificate directly in Glassfish. You may also want to access HTTPS listener directly with port number in URL. Usually you can proxy HTTP and HTTPS ports to their Glassfish counterparts (80) with the certificate installed on webserver (frontend) level but to have Glassfish console (port 4848) secured with certificate you may want to install it directly in Glassfish. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |