1

I've created CSR using keystore file, which is created on my local system.

Once I've received CertificateBundle2.crt & ServerCertificate.crt from CA i.e. Entrust. I'll be using Wildfly 8 as application server.

I followed https://www.entrust.com/get-support/ssl-certificate-support/installation-help/ sites for installation but didn't get much info. First of all not sure which server type i should use.

Vish
  • 346
  • 3
  • 11
  • This Q is not about programming as defined for StackOverflow. It **may** be more appropriate on the S.E. related sites http://serverfault.com OR http://SuperUser.com. Use the `flag` link at the bottom of your Q and ask the moderator to move it. Please don't post the same Q on 2 different sites. Please read http://stackoverflow.com/help/how-to-ask http://stackoverflow.com/help/dont-ask and http://stackoverflow.com/help/mcve before posting more Qs here. Good luck. – shellter Jul 20 '17 at 13:31

1 Answers1

0

Since devs (devops, whatever) are often tasked with doing this, when a sysadmin is not there, here is a good short tutorial what to do with a crt file to get it working with wildfly:

http://reallifejava.com/configuring-ssl-in-wildfly-8/

TLDR

1) create a p12 from the crt file e.g. 

   openssl pkcs12 -export -in ServerCertificate.crt -inkey yourdomain.com.key -out yourdomain.com.p12 -name default -CAfile CertificateBundle2.crt -caname root

2) import the p12 you created into java keystore

 keytool -importkeystore -deststorepass <secret password> -destkeypass <secret password> -destkeystore yourdomain.com.jks -srckeystore yourdomain.com.p12 -srcstoretype PKCS12 -srcstorepass <secret password used in csr> -alias default

3) reference keystore in standalone.xml 

<security-realm name="SslRealm">
<server-identities>
        <ssl>
            <keystore path="yourdomain.com.jks" relative-to="jboss.server.config.dir" keystore-password="<secret password>"/>
    </ssl>
</server-identities>

4) add listener with the https socket binding using this security realm

<https-listener name="default-ssl" socket-binding="https" security-realm="SslRealm"/>

see also:

sprockets
  • 981
  • 1
  • 6
  • 16
  • I'm able configure Wildfly as SSL. Only client authentication part is pending. With self-signed certicate i can achieve client authentication. How do i proceed with trusted certificate which i received from CA?. – Vish Jul 21 '17 at 07:19