jboss4.2.3 SSL配置 + 生成數字簽名

時間 2019-12-09

標籤 jboss4.2.3 jboss ssl 配置生成數字簽名欄目 SSL 简体版

原文原文鏈接

1、生成數字簽名web

1. 生成JKS文件spa

keytool -genkey -keyalg RSA -alias jbosskey -keystore jbosskey.jkscode

在win7系統中，該文件的默認路徑是 C:\Users\rigidserver

2. 導出證書xml

keytool -export -alias jbosskey -file jbosskey.cer -keystore jbosskey.jksblog

在win7系統中，該文件的默認路徑是 C:\Users\rigidssl

3. 查看jks文件的詳情io

keytool -list -keystore jbosskey.jksclass

2、配置JBOSS SSLcli

1. 拷貝jks和cer文件到%JBOSS_HOME%/server/default/conf下

2. 修改jboss-4.2.3.GA\server\default\deploy\jboss-web.deployer\server.xml

增長

keystoreFile="${jboss.server.home.dir}/conf/jbosskey.jks"
keystorePass="1qazxsw2"

 <Connector port="8080" address="${jboss.bind.address}"    
         maxThreads="250" maxHttpHeaderSize="8192"
         emptySessionPath="true" protocol="HTTP/1.1"
         enableLookups="false" redirectPort="8443" acceptCount="100"
         connectionTimeout="20000" disableUploadTimeout="true" />

    <!-- Define a SSL HTTP/1.1 Connector on port 8443
         This connector uses the JSSE configuration, when using APR, the 
         connector should be using the OpenSSL style configuration
         described in the APR documentation -->
    <!--
    <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS" />
    -->
    <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true" 
                 address="${jboss.bind.address}"
                    scheme="https" secure="true" clientAuth="false" 
                    keystoreFile="${jboss.server.home.dir}/conf/jbosskey.jks"
                    keystorePass="1qazxsw2" sslProtocol = "TLS" />