{"id":272,"date":"2005-09-15T12:44:22","date_gmt":"2005-09-15T16:44:22","guid":{"rendered":"http:\/\/www.uvm.edu\/~waw\/blog\/?p=272"},"modified":"2005-09-15T12:44:22","modified_gmt":"2005-09-15T16:44:22","slug":"https-for-badger","status":"publish","type":"post","link":"https:\/\/blog.uvm.edu\/waw\/2005\/09\/15\/https-for-badger\/","title":{"rendered":"httpS for badger"},"content":{"rendered":"

Got hold of a geotrust signed certificate for badger. That was easy (and $110 of UVM money).<\/p>\n

Hard part was getting it installed, since I built the key and the certificate signing request (CSR) with openssl rather than keytool, and it was all being installed in tomcat.<\/p>\n

The Tomcat SSL How-To<\/a> proved to be the definitive source, but it took several readings and several google searches and several failed attempts to get the right syntax and in\/out files. Here’s what finally worked<\/p>\n

\n
openssl pkcs12 -export -in badger.crt -inkey badger.key 
\n-out badger.p12 -name tomcat 
\n-CAfile ca-bundle.crt -caname root -chain
\n
\n<\/pre>\n<\/div>\n
along with this entry in \/usr\/local\/jakarta-tomcat\/conf\/server.xml<\/p>\n
    <Connector port="443" 
\n               maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
\n               enableLookups="false" disableUploadTimeout="true"
\n               acceptCount="100" debug="0" scheme="https" secure="true"
\n               clientAuth="false" sslProtocol="TLS" 
\n                keystoreFile="\/usr\/share\/ssl\/certs\/badger.p12" keystorePass="xxxxxx"
\n                keystoreType="PKCS12"<\/pre>\n
        \/><\/pre>\n
<\/p>\n
Still need to get hold of a certificate from ldap.uvm.edu and add to default JAVA_HOME security chain<\/p>\n","protected":false},"excerpt":{"rendered":"
Got hold of a geotrust signed certificate for badger. That was easy (and $110 of UVM money). Hard part was getting it installed, since I built the key and the certificate signing request (CSR) with openssl rather than keytool, and … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6517,8026],"tags":[],"class_list":["post-272","post","type-post","status-publish","format-standard","hentry","category-projects","category-systems-and-servers"],"_links":{"self":[{"href":"https:\/\/blog.uvm.edu\/waw\/wp-json\/wp\/v2\/posts\/272","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.uvm.edu\/waw\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.uvm.edu\/waw\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.uvm.edu\/waw\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.uvm.edu\/waw\/wp-json\/wp\/v2\/comments?post=272"}],"version-history":[{"count":0,"href":"https:\/\/blog.uvm.edu\/waw\/wp-json\/wp\/v2\/posts\/272\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.uvm.edu\/waw\/wp-json\/wp\/v2\/media?parent=272"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.uvm.edu\/waw\/wp-json\/wp\/v2\/categories?post=272"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.uvm.edu\/waw\/wp-json\/wp\/v2\/tags?post=272"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}