Sun Microsystems 5.1.1 manual Using the OpenSSL Utility, Creating a Sample CA Certificate

Page 36

Chapter 4

Section 4.4

Operating SSL

Using the OpenSSL Utility

4.4Using the OpenSSL Utility

The OpenSSL utility is a free implementation of cryptographic, hashing, and public key algorithms such as 3DES, SHA1, and RSA respectively. This utility has many options including certificate signing, which keytool does not provide. You can download OpenSSL from the following Web site:

http://www.openssl.org

Follow the build and installation instruction for OpenSSL.

To learn more about SSL, and the high level aspects of cryptography, a good source of reference is a book entitled SSL and TLS: Designing and Building Secure Systems (by Eric Rescorla, Published by Addison Wesley Professional; ISBN: 0201615983).

4.4.1Creating a Sample CA Certificate

The sample given in this section demonstrates the use of the OpenSSL utility to create a CA. This generated CA is then used to sign a CSR (see “Signing Certificates With Your Own CA” on page 37), whether it is generated from keytool or OpenSSL.

For testing purposes a sample CA can be generated. To avoid spending additional funds to have a commercial CA sign test certificates, a sample is generated and used to sign the test certificate.

Perform the following operations from the command line:

openssl req -config c:\openssl\bin\openssl.cnf -new -x509 - keyout ca-key.pem.txt -out ca-certificate.pem.txt -days 365

Using properties from c:\openssl\bin\openssl.cnf Loading 'screen' into random state: done Generating a 1024 bit RSA private key

.................++++++

.....................++++++

writing new private key to 'ca-key.pem.txt' Enter PEM pass phrase:

Verifying password: Enter PEM pass phrase:

-----

You are about to be asked to enter information that will be incorporated into your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN.

There are quite a few fields but you can leave some blank For some fields there will be a default value,

If you enter '.', the field will be left blank.

-----

Country Name (2 letter code) []:US

State or Province Name (full name) []:California Locality Name (eg, city) []:Monrovia Organization Name (eg, company) []:SeeBeyond Organizational Unit Name (eg, section) []:Development Common Name (eg, your websites domain name) []

:development.seebeyond.com

Email Address []:development@seebeyond.com

You are prompted for information. You must enter a password and remember this password for signing certificates with the CA’s private key. This command creates a

HTTPS eWay Adapter User’s Guide

36

Sun Microsystems, Inc.

Page 35 Page 37
Image 36
Page 35 Page 37
Contents EWAY Https Adapter USER’S Guide Version Contents Http Settings Proxy Configuration Security Authentication Http OTD Method DescriptionsAdditional SSL Section Notes Verify hostname Connection Pool Settings Server Mode OperationRunning the Sample Running the Sample in SSL Mode Implementing the Https eWay JCD Sample ProjectsAbout Http and Https What’s in This ChapterAbout the Https eWay Http MessagesWeb Browser Cookies Sample Http Exchange in Client Mode GET and Post MethodsCookie Expiration Date Checking Sample Http Exchange in Server Mode Body HtmlWhat’s New in This Release Sample Input FormAbout This Document Scope Intended AudienceText Conventions Https eWay JavadocRelated Documents Sun Microsystems, Inc. Web SiteDocumentation Feedback Installing the Https eWay Https eWay System RequirementsInstalling the Https eWay on an eGate supported system After you have installed eGate or eInsight, do the followingAfter Installation Extracting the Sample Projects and JavadocsSteps to extract the Javadoc include Steps to extract the Sample Projects includeIcan 5.0 Project Migration Procedures Install Java CapsExport the Project Import the ProjectInstalling Enterprise Manager eWay Plug-Ins Viewing Alert Codes To add plug-ins from the Enterprise ManagerTo View the eWay Alert Codes Https eWay Alert CodesHTTPCLIENTEWAY-CONNECT Overview of eWay OTDs Https Client OTDHttps Server OTD Http OTD Method DescriptionsInput Server Request Node Input Server Response Node Working with the Server OTDCollaboration Example SendResponse ExampleOperating SSL OverviewHacker Https eWayKeyStores and TrustStores Generating a KeyStore and TrustStoreKeyStores Creating a KeyStore in JKS FormatTo generate a KeyStore Creating a KeyStore in PKCS12 Format Using an Existing TrustStore TrustStoresCreating a TrustStore To create a new TrustStoreSSL Handshaking Client ServerEWay Client EWay Server WebUsing the OpenSSL Utility Creating a Sample CA CertificateSigning Certificates With Your Own CA Windows OpenSSL.cnf File Example # SSLeay example properties fileChapter Section Operating SSL Using the OpenSSL Utility Copyright 1998-2001 The OpenSSL Project. All rights reserved Creating and Configuring the Https eWay Configuring the eWay Connectivity Map PropertiesTo configure the Https eWay properties To configure the Https Server eWay propertiesConfiguring the eWay Environment Properties Connectivity Map with Components ServerTo Configure the Environment Properties EWay Connectivity Map PropertiesConfiguring the Connectivity Map Https eWay Properties Https eWay Configuration Sections IncludeHttps Server eWay Configuration Sections Include Http eWay-HTTP SettingsHttp Server eWay-HTTP Server External Configuration EWay Environment PropertiesHttp Settings Environment Configuration-HTTP SettingsProxy Configuration Environment Configuration-Proxy ConfigurationProxy password SecurityName Description Required Value Proxy Port Proxy UsernameAuthentication Environment Configuration-Security, AuthenticationEnvironment Configuration-Security, SSL Name Description Required Value Jsse Provider Class Com.sun.net.ssl.internal.ssl.PRovider Com.ibm.jsse.IBMJSSEProvidAdditional SSL Section Notes Verify hostnameDescription Required ValuesConnection Pool Settings Environment Configuration-Connection Pool SettingsAdditional information Setting Acceptor Threads Property for Https Server Mode Implementing the Https eWay Bpel Sample Projects EInsight Engine and ComponentsServer Mode Operation Https eWay With eInsightReceive Business Rule Designer Output Nodes Node Name DescriptionReceive Business Rule Designer Output Nodes About the Https eWay eInsight Sample Projects Importing a Sample ProjectBuilding and Deploying the prjHTTPClientBPEL Sample Project Project OverviewGET Command GetSample.xml Project OperationsInput and Output Data Post Command PostSample.xml Creating a ProjectCreating the OTD Sample DTD MultipleDataIn.dtdOTD Wizard Selection Include DTDs to Selected List Creating a Business Process OTD OptionsLogic of the Business Process Business Process Cases To create a Business ProcessCase Activity Result Business Process Icons Client Business Process With Link Business Rules Client Business Rule Designer First Link Business Rule Business Rule Designer Second Link Business Rule Business Rule Designer Third Link Business Rule Business Rule Designer Case 1 Business Rule Business Rule Designer Case 2 Business Rule Decision Gate Properties Dialog Box Case Creating a Connectivity Map To create a Connectivity MapSelecting External Applications Populating the Connectivity MapDefining the Business Process To select external applicationsBinding the eWay Components Steps required to bind eWay components togetherCreating an Environment Environment Editor envHTTPClientBPELConfiguring the eWays Configuring the Https eWay PropertiesCmHTTPClient Inbound File eWay Settings CmHTTPClient Outbound File eWay SettingsConfiguring the Integration Server Creating and Activating the Deployment ProfileCreating and Starting the Domain Create and Start the DomainBuilding and Deploying the Project Running the SampleBuild the Project ƒ postBPELHTTPS Content of postBPELHTTPS.html is Building and Deploying the prjHTTPServerBPEL Sample ProjectProject Forms Server Sample Project Original FormServer Sample Project Input Form Next step is to create the Project’s Business Process Business Process Icons for Receive and Reply Business Process Icons With Server Business Rules Business Rule Designer Server Receive Business Rule Creating a Connectivity Map Connectivity Map With Components prjHTTPServerBPEL Creating an Environment Running the Sample in SSL Mode ƒ postBPELHTTPS.html input filePermission java.util.PropertyPermission * read, write Implementing the Https eWay JCD Sample Projects About the Https eWay JCD Sample ProjectsBuilding and Deploying the prjHTTPClientJCD Sample Project Https eWay Sample Project Java Collaboration Based SampleIn DTD SampleIn.dtd Creating the Collaboration Definition Java JcdHTTPClient Collaboration Definition Part 101 Connectivity Map With Components prjHTTPClientJCD 103 Building and Deploying the prjHTTPServerJCD Sample Project ƒ Project Overview onƒ postJCEHTTPS 106 107 JcdHTTPServer Collaboration Definition Connectivity Map With Components prjHTTPServerJCD 110 ƒ postJCEHTTPS.html input file 112 Index 114
Top Page Image Contents