Import and configure the certificate for secure SSL connection
To use a secure SSL connection, import a server certificate and add it to the Java KeyStore.
Before you begin
Role required: admin
You must obtain the server certificate and matching private key before adding it to the Java KeyStore.
Procedure
Generate a Certificate Signing Request (CSR) using the
opensslcommand.openssl req -newkey rsa:2048 -keyout PRIVATEKEY.key -out MYCSR.csrSend your CSR (MYCSR.csr in the example above) to your certificate authority to have it signed.
Create a P12 keystore for import using the
opensslcommand.openssl pkcs12 -export -in MYSIGNEDCERT.pem -inkey PRIVATEKEY.key -name shared > MY_SERVER.p12Store your certificate and private key into a jceks file.
keytool -importkeystore -destkeystore keystore.jceks -deststoretype jceks -srckeystore MY_SERVER.p12 -srcstoretype pkcs12 -alias MYALIASThe alias, shown in the example as
MYALIAScan be any value. You will use this alias in theedgeencryption.proxy.https.cert.aliasproperty in theedgeencryption.propertiesfile located in the<installation directory>/conf/folder.Stop and restart the edge proxy.
Note: During a restart, the proxy server is offline for a short time. The amount of time is determined by your environment and how long it takes to stop and restart the proxy service.
Parent Topic:Install the Edge Encryption proxy server using the command line installer
Previous topic:Create and configure the RSA key pair for the digital signature
Next topic:Set up a keystore and encryption keys