Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...


Code Block
titleFor Linux
./keytool -importcert -alias "SSO Server Certificate" -file ../lib/security/login.example.com.crt -keystore ../lib/security/cacerts


Code Block
titleFor Windows
cd %JAVA_HOME%/bin
keytool -importcert -alias "SSO Server Certificate" -file C:\temp\login.example.com.crt -keystore ..\lib\security\cacerts


Import the intermediate certificate. Use the intermediate certificate of the issuer of your externally facing TLS/SSL certificate. In this example, the login.example.com certificate was issued by Comodo.


Code Block
titleFor Linux
./keytool -importcert -alias "COMODO RSA Domain Validation Secure Server CA" -file ../lib/security/COMODORSADomainValidationSecureServerCA.crt -keystore ../lib/security/cacerts


Code Block
titleFor Windows
keytool -importcert -alias "COMODO RSA Domain Validation Secure Server CA" -file C:\temp\COMODORSADomainValidationSecureServerCA.crt -keystore ..\lib\security\cacerts


Import the CA certificate of the issuer of your externally facing TLS/SSL certificate.

Code Block
titleFor Linux
./keytool -importcert -alias "COMODO RSA Certification Authority" -file ../lib/security/COMODORSACertificationAuthority.crt -keystore ../lib/security/cacerts


Code Block
titleFor Windows
keytool -importcert -alias "COMODO RSA Certification Authority" -file C:\temp\COMODORSACertificationAuthority.crt -keystore ..\lib\security\cacerts

Adding the self signed certificate from the default keystore.pfx

...

Code Block
titleFor Linux
keytool -exportcert -keystore /usr/local/ubisecure/ubilogin-sso/ubilogin/custom/tomcat/keystore.pfx -alias tomcat -storepass changeit | keytool -importcert -keystore $JAVA_HOME/lib/security/cacerts -storepass changeit -alias ubisecure-sso-servercert -noprompt

...

Code Block
titleFor Windows
keytool -exportcert -keystore "C:\Program
Files\Ubisecure\ubilogin-sso\ubilogin\custom\tomcat\keystore.pfx" -alias tomcat -storepass changeit | keytool -importcert -keystore "%JAVA_HOME%\lib\security\cacerts" -storepass changeit -alias ubisecure-sso-servercert -noprompt

...