1. Generation KeyStore
[jeus@HOST keystore]$ keytool -genkey -alias ssltest -keyalg RSA -validity 365 -keystore /home/jeus/jeus6/config/HOST/keystore/keystore
Enter keystore password: tmaxtest
Re-enter new password: tmaxtest
What is your first and last name?
[Unknown]: tmax
What is the name of your organizational unit?
[Unknown]: tmax
What is the name of your organization?
[Unknown]: tmax
What is the name of your City or Locality?
[Unknown]: tmax
What is the name of your State or Province?
[Unknown]: tmax
What is the two-letter country code for this unit?
[Unknown]: KR
Is CN=tmax, OU=tmax, O=tmax, L=tmax, ST=tmax, C=KR correct?
[no]: y
Enter key password for <ssltest>
(RETURN if same as keystore password): tmaxtest
Re-enter new password: tmaxtest
2. CER 인증서 생성
[jeus@HOST keystore]$ keytool -export -alias ssltest -keystore /home/jeus/jeus6/config/HOST/keystore/keystore -rfc -file jeusssl.cer
Enter keystore password: tmaxtest
Certificate stored in file <jeusssl.cer>
3. Truststore 생성
[jeus@HOST keystore]$ keytool -export -alias ssltest -keystore /home/jeus/jeus6/config/HOST/keystore/keystore -rfc -file jeusssl.cer
Enter keystore password: tmaxtest
Certificate stored in file <jeusssl.cer>
[jeus@HOST keystore]$ keytool -import -alias ssltestcert -file jeusssl.cer -keystore /home/jeus/jeus6/config/HOST/keystore/truststore
Enter keystore password:
Re-enter new password:
Owner: CN=tmax, OU=tmax, O=tmax, L=tmax, ST=tmax, C=KR
Issuer: CN=tmax, OU=tmax, O=tmax, L=tmax, ST=tmax, C=KR
Serial number: 378efbca
Valid from: Mon Dec 03 19:50:44 KST 2018 until: Tue Dec 03 19:50:44 KST 2019
Certificate fingerprints:
MD5: 5E:9C:84:80:D4:E3:8B:E7:78:D4:50:98:E5:C7:DF:8F
SHA1: EF:09:C2:37:C5:78:17:58:A9:08:A5:6A:47:B3:16:35:41:1B:6D:3A
SHA256: 1F:62:D5:6A:D0:39:97:05:92:22:19:52:18:9C:3B:2A:A0:C9:B5:C3:B9:BC:8D:7F:BB:F5:02:B6:E6:1D:C1:D3
Signature algorithm name: SHA256withRSA
Version: 3
Extensions:
#1: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 81 3E 80 9D CB 10 34 DA 33 D0 F7 C7 F6 58 B5 70 .>....4.3....X.p
0010: 3C B9 E0 A6 <...
]
]
Trust this certificate? [no]: y
Certificate was added to keystore
4. WEBMain.xml
<?xml version="1.0" encoding="UTF-8"?>
<web-container xmlns="http://www.tmaxsoft.com/xml/ns/jeus" version="6.0" xmlns:ns2="http://java.sun.com/xml/ns/javaee" xmlns:ns3="http://java.sun.com/xml/ns/persistence">
<context-group>
<group-name>MyGroup</group-name>
<webserver-connection>
<http-listener>
<listener-id>http1</listener-id>
<port>8088</port>
<thread-pool>
<min>10</min>
<max>20</max>
<step>1</step>
<max-wait-queue>4</max-wait-queue>
</thread-pool>
</http-listener>
<http-listener>
<listener-id>http-ssl</listener-id>
<port>443</port>
<thread-pool>
<min>10</min>
<max>20</max>
<step>1</step>
<max-wait-queue>4</max-wait-queue>
</thread-pool>
<scheme>https</scheme>
<ssl-config>
<enable-secure>true</enable-secure>
<keystore-file>/home/jeus/jeus6/config/HOST/keystore/keystore</keystore-file>
<truststore-file>/home/jeus/jeus6/config/HOST/keystore/truststore</truststore-file>
<keystore-type>JKS</keystore-type>
<truststore-type>JKS</truststore-type>
<keystore-pass>tmaxtest</keystore-pass>
<keystore-keypassword>tmaxtest</keystore-keypassword>
<truststore-pass>tmaxtest</truststore-pass>
</ssl-config>
</http-listener>
</webserver-connection>
<logging>
<access-log>
<handler>
<file-handler>
<name>handler1</name>
<valid-day>1</valid-day>
</file-handler>
</handler>
</access-log>
</logging>
</context-group>
</web-container>
