There are three ways to configure SSL.
...
Code Block | ||
---|---|---|
| ||
cd /usr/local/ubisecure/customerid/tools ./config-wildfly-domain-cert-backend.sh scp /usr/local/wildfly-1014.0.1.0.Final/domain/configuration/keystore.pfx {user}@{host}:/usr/local/wildfly-1014.0.1.0.Final/domain/configuration/keystore.pfx |
Encrypt traffic separately between Front-End and Back-End servers.
These scripts will generate self-signed SSL certificates that uses each host's IP address in the cn-field.
On the Master Node, run config-wildfly-domain-cert-master.sh
...
In the second phase, when you have produced the key store file, you can configure the HTTPS sockets on WildFly by using the following script on the master node. The script expects to find a keystore.pfx file in the path "${WILDFLY_HOME}\domain\configuration\keystore.pfx". The script will configure key store access using the password that was defined in win32linux.config before setup.cmd sh was run
Code Block | ||
---|---|---|
| ||
cd /usr/local/ubisecure/customerid/tools ./config-wildfly-domain-https.sh |
...