jboss ssl

1. Create a folder "ssl" in JBOSS Server "Path D:/jboss-eap-5.0/jboss-as/server/default"

 

 

 

2. Exceute Commands in folder “ssl” in below.  Please rename {key alias} and {cert alias} to name your like without space (e.g. kaming-key).  When prompt you about Yes / No, please type “yes”.  And please keep your password for updating to XML

 

·         keytool -genkey -alias {key alias} -keyalg RSA -keystore server.keystore

 

·         keytool -export -alias {key alias} -file server.crt -keystore server.keystore

 

·         keytool -import -alias {cert alias} -file server.crt -keystore server.keystore

 

 

 

3. Edit XML "server.xml" in JBOSS Server "Path D:/jboss-eap-5.0/jboss-as/server/default/deploy/jbossweb.sar".  Un-remark SSL section like below.  And update the original statement highlighted in BLUE color.  The password is the string that you type in previous step.

 

 

 

      <!-- SSL/TLS Connector configuration using the admin devl guide keystore -->

 

      <Connector protocol="HTTP/1.1" SSLEnabled="true"

 

       port="8443" address="${jboss.bind.address}"

 

       scheme="https" secure="true" clientAuth="false"

 

       keystoreFile="${jboss.server.home.dir}/ssl/server.keystore"

 

       keystorePass="password" sslProtocol = "TLS" />

 

 

 

4. Start JBOSS Server command with SSL

 

run.bat -c default -b 0.0.0.0 -Djavax.net.ssl.trustStore="D:/jboss-eap-5.0/jboss-as/server/default/ssl/server.keystore"