Resin Configuration SSL Description

xiaoxiao2021-03-06  16

Resin Configuration SSL Description

Daan1.0

2004-12-22

Description:

Configuring SSL access functions for the RESIN server, there are several ways [1]:

1. Use OpenSSL under UNIX. (Http://www.openssl.org/)

2. Use Sun's JSSE. (Http://java.sun.com/products/jsse)

3. ...

We introduce the second method here, implementation under Windows 2000.

Ready to work:

WINDOWS 2000 Server.

2. J2SDK 1.4.x. (Already included JSSE)

3. RESIN 2.1.x.

4. KEYTOOL usage [2] in JSSE [2].

step:

1. Create a server certificate

a) Let's talk about how to use Sun's keytool to generate a server certificate. Look at the picture below:

In general, the KeyStore password and myKey master code should be set.

At this time, the certificate file has been saved in this example C: / Resin-

2.1.11 / Keys / Server.KeyStore

2. Configure resin (resin.conf)

Resin's SSL configuration needs to scale , add a few new elements. The red text in the table below is a new part. Among them, Key-Store-file is stored in the previous step file (relative to the RESIN root directory), key-store-password is a password set for the certificate in the previous step.

DOC true keys / server.keystore Yourpasswordhere

test:

Use the above configuration to start the Resin service, we can access https: // localhost.

A quick test method is to create a JSP file as follows and visit him:

Secure? <% = Request.Insecure ()%>

Run /bin/httpd.exe, the result is as follows:

Access https: // localhost /, jump out of an security alert, and choose Yes.

(If you don't want to jump out of this security alert, there are a few points to do: 1 Install the certificate to the client's IE; 2 CN (ie, name and last name) must use the server's machine name, namely DNS name.) Browser Browse https: // localhost /, the effect is as follows:

Browse https://localhost/issecure.jsp test files

This means that we configure RESIN to use SSL success.

Reference:

[1] SSL Configuration: http://localhost/ref/ssl-quick.xtp

And SSL with resin: http://www.caucho.com/resin-3.0/security/ssl.xtp

[2] Java KeyTool Tools and Methods: http://www.ccw.com.cn/htm/center/prog/02_7_8_4.asp

转载请注明原文地址:https://www.9cbs.com/read-41492.html

New Post(0)