Adding a wildcard SSL certificate to JBoss
7:19 PM- Have the wildcard certificate and the private ready, in my case I used decisionview which was available from XOPS.
- Download the two certs below from Geotrust the primary and intermediate certificates
https://knowledge.geotrust.com/library/VERISIGN/ALL_OTHER/Cliff/Certificates/GeoTrust/GT_SecondaryIntermediate_TrueBusinessID_EnterpriseSSL.txt
- Rename the downloaded certs to extension .crt
- Go to URL https://www.sslshopper.com/ssl-converter.html (items shown below)
- Put in the cert chain as shown below:
- The type to convert to PFX / PKCS#12 (you may need to add this twice)
- Add a password to the PFX Password box
- Click on Convert Certificate
- Save file as pfx (download file will begin)
- You can rename to *.p12 once the file is saved (format Jboss will understand)
- Move to the conf folder of JBOSS server
- Update the JBOSS server.xml like below:
<Connector protocol="HTTP/1.1" SSLEnabled="true"
port="443" address="172.24.1.239"
scheme="https" secure="true" clientAuth="false"
keystoreFile="/your/location/to/conf/dv_ssl_cert.p12"
keystorePass="changeit" sslProtocol = "TLS"
keystoreType="PKCS12" />
- Restart JBOSS and test that you have a valid cert displayed
- The Openssl command that does the same must be run all on one line <shown below>
0 comments