Sunday, December 9, 2007

Updates: SSL Configuration



The SSL Connection setup and certification is done by Adrian to allow communication between Server and Client over a secured connection.

Meaning data being sent is
1) encrypted by one side
2) transmitted
3) then decrypted by the other side
4) finally processing

This is a two-way process, meaning that both the server and the client browser encrypt all traffic before sending out data.

To install and configure SSL support on Tomcat, we followed the tutorial from
http://tomcat.apache.org/tomcat-4.0-doc/ssl-howto.html

Topics like
1) Download the specified files/softwares
2) How to prepare/create the certificate keystore
3) Edit the tomcat configuration file "server.xml"
4) Troubleshoot and stuffs..

How to configure in 5mins

Step 1: Prepare the Certificate Keystore
In terminal, type:

keytool -genkey -alias tomcat -keyalg RSA


.keystore will be created at the home dir.

Step 2: Edit Tomcat's server.xml
Look for this portion and uncomment it.
<-- Define an SSL HTTP/1.1 Connector on port 8443 -->

Finally, we test it on the port 8443. >> https://localhost:8443

No comments: