jboss ssl

1. Create a folder "ssl" in JBOSS Server "Path D:/jboss-eap-5.0/jboss-as/server/default"



2. Exceute Commands in folder “ssl” in below. Please rename {key alias} and {cert alias} to name your like without space (e.g. kaming-key). When prompt you about Yes / No, please type “yes”. And please keep your password for updating to XML

· keytool -genkey -alias {key alias} -keyalg RSA -keystore server.keystore

· keytool -export -alias {key alias} -file server.crt -keystore server.keystore

· keytool -import -alias {cert alias} -file server.crt -keystore server.keystore



3. Edit XML "server.xml" in JBOSS Server "Path D:/jboss-eap-5.0/jboss-as/server/default/deploy/jbossweb.sar". Un-remark SSL section like below. And update the original statement highlighted in BLUE color. The password is the string that you type in previous step.



<!-- SSL/TLS Connector configuration using the admin devl guide keystore -->

<Connector protocol="HTTP/1.1" SSLEnabled="true"

port="8443" address="${jboss.bind.address}"

scheme="https" secure="true" clientAuth="false"

keystoreFile="${jboss.server.home.dir}/ssl/server.keystore"

keystorePass="password" sslProtocol = "TLS" />



4. Start JBOSS Server command with SSL

run.bat -c default -b 0.0.0.0 -Djavax.net.ssl.trustStore="D:/jboss-eap-5.0/jboss-as/server/default/ssl/server.keystore"