Sun Microsystems 5.1.1 manual Signing Certificates With Your Own CA

Page 37

Chapter 4	Section 4.4
Operating SSL	Using the OpenSSL Utility

private key and the corresponding certificate for the CA. The certificate is valid for 365 days starting from the date and time it was created.

The properties file C:\openssl\bin\openssl.cnf is needed for the req command. The default config.cnf file is in the OpenSSL package under the apps sub-directory.

Note: That to use this file in Windows, you must change the paths to use double back- slashes. See “Windows OpenSSL.cnf File Example” on page 38 for a complete Config.cnf file example, which is known to work in a Windows environment.

4.4.2Signing Certificates With Your Own CA

The example in this section shows how to create a CSR with keytool and generate a signed certificate for the CSR with the CA created in the previous section. The steps shown in this section, for generating a KeyStore and a CSR, were already explained under “Creating a KeyStore in JKS Format” on page 29.

Note: No details are given here for the keytool commands. See “Creating a KeyStore in JKS Format” on page 29 for more information.

To create a CSR with keytool and generate a signed certificate for the CSR 1

keytool –keystore clientkeystore –genkey –alias client

Enter keystore password: seebeyond What is your first and last name? [Unknown]: development.seebeyond.com

What is the name of your organizational unit? [Unknown]: Development

What is the name of your organization? [Unknown]: SeeBeyond

What is the name of your City or Locality? [Unknown]: Monrovia

What is the name of your State or Province? [Unknown]: California

What is the two-letter country code for this unit? [Unknown]: US

Is <CN=Foo Bar, OU=Development, O=SeeBeyond, L=Monrovia, ST=Californi a, C=US> correct?

[no]: yes

Enter key password for <client> (RETURN if same as keystore password):

2

keytool –keystore clientkeystore –certreq –alias client – keyalg rsa –file client.csr

3

openssl x509 -req -CA ca-certificate.pem.txt CAkey ca-key.pem.txt

-in client.csr -out client.cer -days 365 -CAcreateserial

This is how we create a signed certificate for the associated CSR. The option

-CAcreateserialis needed if this is the first time the command is issued. It is used to

HTTPS eWay Adapter User’s Guide

37

Sun Microsystems, Inc.

Image 37

Contents EWAY Https Adapter USER’S Guide Version Contents Http OTD Method Descriptions Http Settings Proxy Configuration Security AuthenticationAdditional SSL Section Notes Verify hostname Server Mode Operation Connection Pool SettingsImplementing the Https eWay JCD Sample Projects Running the Sample Running the Sample in SSL ModeWhat’s in This Chapter About Http and HttpsHttp Messages About the Https eWayWeb Browser Cookies GET and Post Methods Sample Http Exchange in Client ModeCookie Expiration Date Checking Body Html Sample Http Exchange in Server ModeSample Input Form What’s New in This ReleaseAbout This Document Intended Audience ScopeText Conventions Https eWay JavadocSun Microsystems, Inc. Web Site Related DocumentsDocumentation Feedback Https eWay System Requirements Installing the Https eWayAfter you have installed eGate or eInsight, do the following Installing the Https eWay on an eGate supported systemExtracting the Sample Projects and Javadocs After InstallationSteps to extract the Javadoc include Steps to extract the Sample Projects includeInstall Java Caps Ican 5.0 Project Migration ProceduresExport the Project Import the ProjectInstalling Enterprise Manager eWay Plug-Ins To add plug-ins from the Enterprise Manager Viewing Alert CodesTo View the eWay Alert Codes Https eWay Alert CodesHTTPCLIENTEWAY-CONNECT Https Client OTD Overview of eWay OTDsHttp OTD Method Descriptions Https Server OTDInput Server Request Node Working with the Server OTD Input Server Response NodeSendResponse Example Collaboration ExampleOverview Operating SSLHttps eWay HackerGenerating a KeyStore and TrustStore KeyStores and TrustStoresKeyStores Creating a KeyStore in JKS FormatTo generate a KeyStore Creating a KeyStore in PKCS12 Format TrustStores Using an Existing TrustStoreCreating a TrustStore To create a new TrustStoreSSL Handshaking Server ClientEWay Server Web Client EWayCreating a Sample CA Certificate Using the OpenSSL UtilitySigning Certificates With Your Own CA # SSLeay example properties file Windows OpenSSL.cnf File ExampleChapter Section Operating SSL Using the OpenSSL Utility Copyright 1998-2001 The OpenSSL Project. All rights reserved Configuring the eWay Connectivity Map Properties Creating and Configuring the Https eWayTo configure the Https Server eWay properties To configure the Https eWay propertiesConnectivity Map with Components Server Configuring the eWay Environment PropertiesEWay Connectivity Map Properties To Configure the Environment PropertiesHttps eWay Configuration Sections Include Configuring the Connectivity Map Https eWay PropertiesHttps Server eWay Configuration Sections Include Http eWay-HTTP SettingsEWay Environment Properties Http Server eWay-HTTP Server External ConfigurationEnvironment Configuration-HTTP Settings Http SettingsEnvironment Configuration-Proxy Configuration Proxy ConfigurationSecurity Proxy passwordName Description Required Value Proxy Port Proxy UsernameEnvironment Configuration-Security, Authentication AuthenticationEnvironment Configuration-Security, SSL Com.sun.net.ssl.internal.ssl.P Name Description Required Value Jsse Provider ClassRovider Com.ibm.jsse.IBMJSSEProvidVerify hostname Additional SSL Section NotesDescription Required ValuesEnvironment Configuration-Connection Pool Settings Connection Pool SettingsAdditional information Setting Acceptor Threads Property for Https Server Mode EInsight Engine and Components Implementing the Https eWay Bpel Sample ProjectsHttps eWay With eInsight Server Mode OperationReceive Business Rule Designer Output Nodes Node Name DescriptionReceive Business Rule Designer Output Nodes Importing a Sample Project About the Https eWay eInsight Sample ProjectsProject Overview Building and Deploying the prjHTTPClientBPEL Sample ProjectProject Operations GET Command GetSample.xmlInput and Output Data Creating a Project Post Command PostSample.xmlCreating the OTD Sample DTD MultipleDataIn.dtdOTD Wizard Selection Include DTDs to Selected List OTD Options Creating a Business ProcessLogic of the Business Process To create a Business Process Business Process CasesCase Activity Result Business Process Icons Client Business Process With Link Business Rules Client Business Rule Designer First Link Business Rule Business Rule Designer Second Link Business Rule Business Rule Designer Third Link Business Rule Business Rule Designer Case 1 Business Rule Business Rule Designer Case 2 Business Rule Decision Gate Properties Dialog Box Case To create a Connectivity Map Creating a Connectivity MapPopulating the Connectivity Map Selecting External ApplicationsDefining the Business Process To select external applicationsSteps required to bind eWay components together Binding the eWay ComponentsEnvironment Editor envHTTPClientBPEL Creating an EnvironmentConfiguring the Https eWay Properties Configuring the eWaysCmHTTPClient Inbound File eWay Settings CmHTTPClient Outbound File eWay SettingsCreating and Activating the Deployment Profile Configuring the Integration ServerCreate and Start the Domain Creating and Starting the DomainRunning the Sample Building and Deploying the ProjectBuild the Project Building and Deploying the prjHTTPServerBPEL Sample Project ƒ postBPELHTTPS Content of postBPELHTTPS.html isServer Sample Project Original Form Project FormsServer Sample Project Input Form Next step is to create the Project’s Business Process Business Process Icons for Receive and Reply Business Process Icons With Server Business Rules Business Rule Designer Server Receive Business Rule Creating a Connectivity Map Connectivity Map With Components prjHTTPServerBPEL Creating an Environment ƒ postBPELHTTPS.html input file Running the Sample in SSL ModePermission java.util.PropertyPermission * read, write About the Https eWay JCD Sample Projects Implementing the Https eWay JCD Sample ProjectsBuilding and Deploying the prjHTTPClientJCD Sample Project Https eWay Sample Project Java Collaboration Based SampleIn DTD SampleIn.dtd Creating the Collaboration Definition Java JcdHTTPClient Collaboration Definition Part 101 Connectivity Map With Components prjHTTPClientJCD 103 ƒ Project Overview on Building and Deploying the prjHTTPServerJCD Sample Projectƒ postJCEHTTPS 106 107 JcdHTTPServer Collaboration Definition Connectivity Map With Components prjHTTPServerJCD 110 ƒ postJCEHTTPS.html input file 112 Index 114