WLP: Adicionando um certificado TLS como confiável na Liberty trust store: Difference between revisions

From Wiki
(Criou a página com "== Ver também == * Mais Artigos sobre WebSphere Application Server Category: WebSphere Application Server [[Category: WAS Liberty]...")
 
No edit summary
 
(4 intermediate revisions by the same user not shown)
Line 1: Line 1:
== Ver também ==  
= Procedimento =  


1) Vá ao diretório do Liberty
cd <wlp_root>/usr/servers/defaultServer/resources/security
2) Download do certificado
openssl s_client -connect <HOST:PORT> </dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > <NOME_DO-ARQUIVO.cer>
3) Removendo caso já exista
<small><IHS_HOME>/java/8.0/jre/bin/ikeycmd -cert -delete -db "<wlp_root>/usr/servers/defaultServer/resources/security/key.jks" \
-pw <PASSWORD> -label <LABEL_CERTIFICADO> > /dev/null</small>
4) Salvando no key store do Liberty
<small><IHS_HOME>/java/8.0/jre/bin/ikeycmd -cert -add -db "<wlp_root>/usr/servers/defaultServer/resources/security/key.jks" \
-file "<wlp_root>/usr/servers/defaultServer/resources/security/NOME_DO-ARQUIVO.cer" \
-pw <PASSWORD> -label <LABEL_CERTIFICADO> > /dev/null</small>
= Ver também =
* [[WebSphere Application Server|  Mais Artigos sobre WebSphere Application Server]]
* [[WebSphere Application Server|  Mais Artigos sobre WebSphere Application Server]]


Line 6: Line 27:
[[Category: WAS Liberty]]
[[Category: WAS Liberty]]
[[Category: WAS]]
[[Category: WAS]]
[[Category: WLP]]
[[Category:Certificados TLS]]
[[Category:OpenSSL]]
[[Category:ikeyman]]

Latest revision as of 21:16, 7 December 2023

Procedimento

1) Vá ao diretório do Liberty

cd <wlp_root>/usr/servers/defaultServer/resources/security


2) Download do certificado

openssl s_client -connect <HOST:PORT> </dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > <NOME_DO-ARQUIVO.cer>

3) Removendo caso já exista

<IHS_HOME>/java/8.0/jre/bin/ikeycmd -cert -delete -db "<wlp_root>/usr/servers/defaultServer/resources/security/key.jks" \
-pw <PASSWORD> -label <LABEL_CERTIFICADO> > /dev/null

4) Salvando no key store do Liberty

<IHS_HOME>/java/8.0/jre/bin/ikeycmd -cert -add -db "<wlp_root>/usr/servers/defaultServer/resources/security/key.jks" \
-file "<wlp_root>/usr/servers/defaultServer/resources/security/NOME_DO-ARQUIVO.cer" \
-pw <PASSWORD> -label <LABEL_CERTIFICADO> > /dev/null

Ver também