1. Generate a digital signature
1. Generate a jks File
Keytool-genkey-keyalg RSA-alias jbosskey-keystore jbosskey. jks
In win7, the default path of this file is c: \ Users \ rigid.
2. Export the certificate
Keytool-export-alias jbosskey-file jbosskey. cer-keystore jbosskey. jks
In win7, the default path of this file is c: \ Users \ rigid.
3. View Details of the jks File
Keytool-list-keystore jbosskey. jks
Ii. Configure JBoss SSL
1. Copy the jks and CER files to % jboss_home %/Server/default/CONF.
2. Modify jboss-4.2.3.GA \ Server \ Default \ deploy \ jboss-web.deployer \ Server. xml
Add
Keystorefile = "$ {JBoss. server. Home. dir}/CONF/jbosskey. jks"
Keystorepass = "1qazxsw2"
<Connector port="8080" address="${jboss.bind.address}" maxThreads="250" maxHttpHeaderSize="8192" emptySessionPath="true" protocol="HTTP/1.1" enableLookups="false" redirectPort="8443" acceptCount="100" connectionTimeout="20000" disableUploadTimeout="true" /> <!-- Define a SSL HTTP/1.1 Connector on port 8443 This connector uses the JSSE configuration, when using APR, the connector should be using the OpenSSL style configuration described in the APR documentation --> <!-- <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="150" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" /> --> <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true" address="${jboss.bind.address}" scheme="https" secure="true" clientAuth="false" keystoreFile="${jboss.server.home.dir}/conf/jbosskey.jks" keystorePass="1qazxsw2" sslProtocol = "TLS" />
Jboss4.2.3 SSL configuration + Digital Signature generation