[{"data":1,"prerenderedAt":298},["ShallowReactive",2],{"Categories":3,"NavIndexCategoriesCountFooter":203,"content-\u002F2008\u002F08\u002F09\u002Finstalling-a-ca-signed-certificate-for-glassfish\u002F":204},[4,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,68,70,71,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202],{"category":5},"System Administration",{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":27},"Software Development",{"category":5},{"category":5},{"category":5},{"category":5},{"category":27},{"category":27},{"category":5},{"category":5},{"category":5},{"category":27},{"category":5},{"category":5},{"category":5},{"category":27},{"category":27},{"category":27},{"category":27},{"category":5},{"category":5},{"category":5},{"category":27},{"category":27},{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":5},{"category":27},{"category":5},{"category":5},{"category":27},{"category":27},{"category":27},{"category":27},{"category":5},{"category":27},{"category":27},{"category":67},"Drones & RC",{"category":69},"DIY Projects",{"category":67},{"category":72},"Photography",{"category":69},{"category":69},{"category":69},{"category":67},{"category":69},{"category":69},{"category":69},{"category":69},{"category":69},{"category":69},{"category":69},{"category":69},{"category":69},{"category":69},{"category":69},{"category":69},{"category":69},{"category":69},{"category":67},{"category":69},{"category":69},{"category":67},{"category":67},{"category":72},{"category":72},{"category":72},{"category":67},{"category":67},{"category":67},{"category":67},{"category":67},{"category":67},{"category":67},{"category":67},{"category":67},{"category":67},{"category":5},{"category":5},{"category":72},{"category":67},{"category":67},{"category":67},{"category":67},{"category":67},{"category":67},{"category":5},{"category":67},{"category":67},{"category":72},{"category":72},{"category":67},{"category":67},{"category":67},{"category":67},{"category":67},{"category":67},{"category":67},{"category":67},{"category":67},{"category":67},{"category":67},{"category":67},{"category":72},{"category":67},{"category":138},"3D Printing - Laser Cutting - CNC",{"category":138},{"category":138},{"category":138},{"category":138},{"category":138},{"category":138},{"category":138},{"category":138},{"category":138},{"category":138},{"category":138},{"category":5},{"category":138},{"category":27},{"category":27},{"category":138},{"category":138},{"category":72},{"category":158},"Photography,3D Printing - Laser Cutting - CNC",{"category":27},{"category":27},{"category":69},{"category":27},{"category":27},{"category":27},{"category":27},{"category":5},{"category":67},{"category":5},{"category":5},{"category":27},{"category":27},{"category":27},{"category":27},{"category":27},{"category":69},{"category":27},{"category":27},{"category":27},{"category":27},{"category":181},"Home Assistant",{"category":181},{"category":72},{"category":27},{"category":27},{"category":72},{"category":138},{"category":5},{"category":72},{"category":72},{"category":138},{"category":27},{"category":181},{"category":181},{"category":72},{"category":72},{"category":72},{"category":72},{"category":72},{"category":72},{"category":72},{"category":72},191,{"id":205,"title":206,"body":207,"category":5,"date":282,"description":213,"embedImage":283,"extension":284,"image":283,"intro":283,"meta":285,"navigation":286,"path":287,"seo":288,"series":283,"sitemap":289,"stem":290,"tags":291,"__hash__":297},"content\u002F2008\u002F08\u002F09\u002Finstalling-a-ca-signed-certificate-for-glassfish.md","Installing a CA signed certificate for glassfish",{"type":208,"value":209,"toc":279},"minimark",[210,214,226,229,232,243,246,252,255,258,261,267,270,276],[211,212,213],"p",{},"Instead of using a self-signed certificate with glassfish - we want to use one that is signed by a certificate authority.",[211,215,216,217],{},"Based on ",[218,219,220],"a",{"href":220,"rel":221,"target":225},"http:\u002F\u002Fblogs.sun.com\u002Fenterprisetechtips\u002Fentry\u002Fusing_ssl_with_glassfish_v2",[222,223,224],"nofollow","noopener","noreferer","_blank",[211,227,228],{},"For this entire post - the keystore.jks file is the one found in the glassfish domain config - e.g. glassfish\u002Fdomains\u002Fdomain1\u002Fconfig\u002Fkeystore.jks",[211,230,231],{},"First - generate a keypair (this will generate a full self-signed certificate)",[233,234,239],"pre",{"className":235,"code":237,"language":238},[236],"language-text","keytool -genkeypair -keyalg RSA -keystore keystore.jks\n-storepass changeit -validity 365\n-alias dev.chrissearle.net\n","text",[240,241,237],"code",{"__ignoreMap":242},"",[211,244,245],{},"Then - generate a signing request",[233,247,250],{"className":248,"code":249,"language":238},[236],"keytool -certreq -alias dev.chrissearle.net\n-file newreq.pem -keystore keystore.jks\n-storepass changeit\n",[240,251,249],{"__ignoreMap":242},[211,253,254],{},"Send the generated certificate request off for signing (or sign it yourself if using a self-generated CA).",[211,256,257],{},"The sun blog has a java app for doing the replacement of the self-generated with the signed certificate. Attached to this post is that file and also compiled with JDK 6.",[211,259,260],{},"This seems to want the certificate in DER form - not PEM.",[233,262,265],{"className":263,"code":264,"language":238},[236],"openssl x509 -in newcert.pem -inform PEM -out newcert.der -outform DER\n\njava -cp . ReplaceCertInKeystore newcert.der keystore.jks changeit dev.chrissearle.net\n",[240,266,264],{"__ignoreMap":242},[211,268,269],{},"You can check if this is successful:",[233,271,274],{"className":272,"code":273,"language":238},[236],"keytool -list -v -alias dev.chrissearle.net -keystore keystore.jks -storepass changeit\n",[240,275,273],{"__ignoreMap":242},[211,277,278],{},"In the output of this command - check to see the details under \"Issuer\". This should be the details of the signing authority.",{"title":242,"searchDepth":280,"depth":280,"links":281},2,[],"2008-08-09 11:31:38 +0200",null,"md",{},true,"\u002F2008\u002F08\u002F09\u002Finstalling-a-ca-signed-certificate-for-glassfish",{"title":206,"description":213},{"loc":287},"2008\u002F08\u002F09\u002Finstalling-a-ca-signed-certificate-for-glassfish",[292,293,294,295,296],"ssl","keystore","keytool","glassfish","openssl","7V3ggH70kyxUmhS0MvfikJpJL0Nhq8To0qnS1aPNGs8",1775293015316]