Thursday, July 22, 2010

Confluence SSL Certificate Configuration

Wiki certificate was expired. Myself and Kenny worked on this. There are couple of steps to import/install the certificate.

Installing The Certificates to the Keystore:
1.Download your SSL Certificate file (your_domain_name.p7b) from your Account to the directory where your keystore was saved during the CSR creation process (the keystore will be called your_site_name.jks if you used keytool CSR command generator).
NOTE: The certificate must be installed to the same keystore that was used to generate your CSR. If you try to install it to a different keystore it will not work.
2.Type the following command to install the certificate file to your keystore:
keytool -import -trustcacerts -alias server -file your_site_name.p7b -keystore your_site_name.jks
3.You should get a confirmation stating that the "Certificate reply was installed in keystore"
4.If it asks if you want to trust the certificate. Choose y or yes.
Your keystore file (your_site_name.jks) is now ready to use on your Tomcat Server and you just need to configure your server to use it.
 

Configuring your SSL Connector:
Tomcat will first need an SSL Connector configured before it can accept secure connections.
1. Open the Tomcat server.xml file in a text editor (this is usually located in the conf folder of your Tomcat's home directory).
2. Find the connector that will be secured with the new keystore and uncomment it if necessary (it is usually a connector with port 443 or 8443 like the example below).
3. Specify the correct keystore filename and password in your connector configuration. When you are done your connector should look something like this:
4. Save your changes to the server.xml file.
5. Restart Service.