Adding a wildcard SSL certificate to JBoss

7:19 PM

  • Have the wildcard certificate and the private ready, in my case I used decisionview which was available  from XOPS.
  • Download the two certs below from Geotrust the primary and intermediate certificates
https://knowledge.geotrust.com/library/VERISIGN/ALL_OTHER/Cliff/Certificates/GeoTrust/GT_PrimaryIntermediate_TrueBusinessID_EnterpriseSSL.txt
https://knowledge.geotrust.com/library/VERISIGN/ALL_OTHER/Cliff/Certificates/GeoTrust/GT_SecondaryIntermediate_TrueBusinessID_EnterpriseSSL.txt
  • Rename the downloaded certs to extension .crt
  • Put in the cert chain as shown below:
  • The type to convert to   PFX / PKCS#12   (you may need to add this twice)
  • Add a password to the PFX Password box

  • Click on Convert Certificate
  • Save file as pfx    (download file will begin)
  • You can rename to *.p12 once the file is saved   (format Jboss will understand)
  • Move to the conf folder of JBOSS server
  • Update the JBOSS server.xml like below:
<!- SSL/TLS Connector configuration using the admin devl guide keystore->   
     <Connector protocol="HTTP/1.1" SSLEnabled="true"
     port="443" address="172.24.1.239"
      scheme="https" secure="true" clientAuth="false"
      keystoreFile="/your/location/to/conf/dv_ssl_cert.p12"
      keystorePass="changeit" sslProtocol = "TLS"
      keystoreType="PKCS12" />
  • Restart JBOSS and test that you have a valid cert displayed
  • The Openssl command that does the same must be run all on one line    <shown below>
openssl pkcs12 -export -in dv_ssl_cert.crt -inkey dv_private.key -out KEYSTORE.p12 -name "tomcat" -caname decisionview

You Might Also Like

0 comments

Contact Form

Name

Email *

Message *

Translate

Wikipedia

Search results