User Tools

Site Tools


tips:java:resinssl

Enabling SSL and installing certificates with Resin

1. INSTALL JSSE

Add:

  • jsse.jar
  • jcert.jar
  • jnet.jar

to: _$JAVA_HOME/jre/lib/ext_

2. ADD THE SSL SECURITY PROVIDER

Change _$JAVA_HOME/jre/lib/security/java.security_ to:

security.provider.2=com.sun.net.ssl.internal.ssl.Provider

3. GENERATE THE CSR

cd /usr/local/resin/
mkdir keys
cd keys
keytool -genkey -keyalg "RSA" -keystore server.keystore
keytool -certreq -keystore server.keystore > csr.txt

4. SUBMIT THE CSR

5. MAKE SURE EACH CERTIFICATE ENDS WITH A LINEFEED

6. IMPORT THE CA CERTIFICATE

cd $JAVA_HOME/jre/lib/security
keytool -import -keystore cacerts -trustcacerts -file Equifax.cer

7. IMPORT THE SERVER CERTIFICATE

cd /usr/local/resin/keys/
keytool -import -keystore server.keystore -trustcacerts -file server.cert
tips/java/resinssl.txt · Last modified: 2009/06/08 04:52 by erik