Installation valid SSL certificate

Transcription

1 Installation valid SSL certificate Guide will cover: How to create Java keystore and CSR with portecle tool How to submit CSR to Certificate Authority (CA) How to import certificate from CA How to configure keystore on webnetwork server Requirements: Purchase SSL certificate from CA vendor Examples of CA providers: Godaddy, RapidSSL, DigiCert, GeoTrust, etc... How to create Java keystore and CSR with portecle tool Purpose: Steps: webnetwork runs on a java-based webserver called Jetty and requires a java keystore for SSL You must create a keystore and certificate request (CSR) for Certificate Authority (CA) vendor 1. Download portecle tool 2. Extract ZIP file and launch portecle.jar 3. Click file and select New Keystore 4. Choose JKS then click OK 5. Click Tools then choose Generate Key Pair Choose RSA 2048 then click OK 7. Change Signature Algorithm to SHA256withRSA 8. Input proper information in the fields then click OK 9. Leave Alias as default and click OK 10. Enter password for keystore 11. Verify successful creation then click OK 12. Go to File and select Save Keystore As Enter password again then click OK 14. Enter file name and click Save 15. Right-click on highlighted keystore and select Generate Certificate Request (CSR) Page 1

2 16. Click Generate 17. Verify CSR created successful then click OK 1. Download portecle tool Page 2

3 2. Extract ZIP file and launch portecle.jar Page 3

4 3. Click file and select New Keystore 4. Choose JKS then click OK Page 4

5 5. Click Tools then choose Generate Key Pair Choose RSA 2048 then click OK Page 5

6 7. Change Signature Algorithm to SHA256withRSA Page 6

7 8. Input proper information in the fields then click OK IMPORTANT - Common Name (CN) should be the name of your domain and certificate purchased 9. Leave Alias as default and click OK Page 7

8 10. Enter password for keystore IMPORTANT - document password for later use in webnetwork and make sure it is complex password 11. Verify successful creation then click OK Page 8

9 12. Go to File and select Save Keystore As Enter password again then click OK IMPORTANT - make sure its the same password entered earlier Page 9

10 14. Enter file name and click Save End file with JKS to easily open file again with portecle tool Page 10

11 15. Right-click on highlighted keystore and select Generate Certificate Request (CSR) Page 11

12 16. Click Generate 17. Verify CSR created successful then click OK How to submit CSR to Certificate Authority (CA) Purpose: Certificate Authority vendor needs CSR to generate certificate file Steps: 1. Submit to CA vendor Page 12

13 1. Submit to CA vendor All vendors handle submission and verification slightly differently Vendors typically won't let you upload a file, so open the CSR file with notepad and copy the contents to vendor site If you did not register your domain with the same vendor who you purchased SSL certificate from, you may need to verify you own the domain Typically ownership is done by WHOIS lookup of domain and contacting the technical and admin contacts (may differ depending on CA vendor chosen) Typically verification and submisison takes a few hours or less How to import certificate from CA Purpose: Steps: Certificate needs to be imported into keystore before placing on wn servers 1. Right-click on keystore and choose Import CA Reply 2. Click OK 3. Click OK again 4. Click Yes 5. Enter password 6. Verify successful 7. Go to File then Save Keystore Page 13

14 1. Right-click on keystore and choose Import CA Reply Portecle tool certificate must be in P7B format If you need to convert certificate to P7B, you can use Internet Explorer to help with process Simply go to Tools -> Internet Options -> Content -> Ceriticates and use Import/Export buttons 2. Click OK Page 14

15 3. Click OK again 4. Click Yes Page 15

16 5. Enter password 6. Verify successful 7. Go to File then Save Keystore Page 16

17 How to configure keystore on webnetwork server Purpose: Steps: You'll need to configure webnetwork server(s) to use the new keystore file and match up keystore password with relayuser 1. Copy keystore file to webnetwork server(s) 2. Go to webadmin tool 3. Expand Relay Admin and click on relay object 4. Change certificate path to match your keystore file 5. Click Save button 6. Expand User-Group Admin folder 7. Expand Users object 8. Click on relayuser 9. Click Authentication tab 10. Click "Change" button 11. Change password to match keystore password 12. Verify password has been changed 13. Close webadmin 14. Logout 15. Go to Server Management Console 16. Go to Services tab 17. Right-click on relay object 18. Click Properties 19. Change password to match keystore password 20. Click Save button 21. Click Setting tab then shutdown button 22. Click OK button 23. Verify webnetwork service is shutdown 24. Change relayuser password in directory 25. Startup webnetwork service 1. Copy keystore file to webnetwork server(s) Copy to stoneware\config directory Example keystore file was called company.jks Page 17

18 2. Go to webadmin tool Page 18

19 3. Expand Relay Admin and click on relay object Page 19

20 4. Change certificate path to match your keystore file Page 20

21 5. Click Save button 6. Expand User-Group Admin folder Page 21

22 7. Expand Users object 8. Click on relayuser Page 22

23 9. Click Authentication tab 10. Click "Change" button Page 23

24 11. Change password to match keystore password IMPORTANT - relayuser password must match earlier keystore password entered with portecle tool 12. Verify password has been changed 13. Close webadmin Page 24

25 14. Logout 15. Go to Server Management Console Page 25

26 16. Go to Services tab Some services will be marked red and that is normal behavior because you do not have a full license Contact sales@stone-ware.com for more information about a full license Page 26

27 17. Right-click on relay object Page 27

28 18. Click Properties Page 28

29 19. Change password to match keystore password IMPORTANT - relayuser password must match earlier keystore password entered with portecle tool Page 29

30 20. Click Save button Page 30

31 21. Click Setting tab then shutdown button 22. Click OK button 23. Verify webnetwork service is shutdown Page 31

32 24. Startup webnetwork service services.msc Page 32