{"id":42445,"date":"2016-11-24T18:22:54","date_gmt":"2016-11-24T12:52:54","guid":{"rendered":"https:\/\/2thenew.online\/blog\/?p=42445"},"modified":"2016-11-29T11:08:50","modified_gmt":"2016-11-29T05:38:50","slug":"how-to-configure-ssl-certificate-on-oracle-glassfish-v3-1","status":"publish","type":"post","link":"https:\/\/2thenew.online\/blog\/how-to-configure-ssl-certificate-on-oracle-glassfish-v3-1\/","title":{"rendered":"How to configure SSL certificate on Oracle Glassfish v3.1"},"content":{"rendered":"

\"download\"<\/p>\n

 <\/p>\n

GlassFish<\/b> is an open-source application server project started by Sun Microsystems for the Java \u00a0platform and now sponsored by Oracle Corporation. It helps in developing scalable and portable applications.<\/a><\/p>\n

One issue which always comes up while deploying Glassfish on live is setting up custom SSL. The Glassfish provides a predefined SSL cert with every Glassfish deployment but that does not serve the purpose of the developed applications configured to work with custom domain names e.g www.example.com. Glassfish uses Keystore to store SSL certificates.<\/p>\n

This article how we can configure the\u00a0SSL cert over Glassfish as quickly as possible. We will be using Glassfish 3.1.<\/p>\n

Pre-requisites : <\/b> You must have terminal(command line access to the server which is running Glassfish and a SSL cert along with the keys. You can also use a self-signed cert for trying out the below steps.<\/p>\n

1. Backup the current settings<\/strong>
\nGo to your Glassfish installation
\ncd \/usr\/local\/glassfish-3.1\/glassfish\/domains\/domain1\/config\/<\/code><\/p>\n

2. Save the default SSL Keystore<\/strong>
\ncp keystore.jks keystore.jks.ori<\/code><\/p>\n

3. Delete the default SSL certificate from the Keystore<\/strong>
\nkeytool -delete -alias s1as -keystore keystore.jks -storepass {admin password} <\/code>
\nNote: The default alias of SSL certs for all glassfish installation is s1as<\/p>\n

4. Prepare your certificate<\/strong>
\ncat server.crt intermediate.CA.crt Root.CA.crt > combined_servercert_chain.crt<\/code><\/p>\n

5. Convert your certificate to pkcs#12<\/strong>
\nopenssl pkcs12 -export -in combined_servercert_chain.crt -inkey serverkey.pem -out keystore.pkcs12 -name s1as -passout pass:{admin password}<\/code><\/p>\n

5. Now Import the converted cert to the Keystore<\/strong>
\nkeytool -importkeystore -srckeystore keystore.pkcs12 -srcstoretype pkcs12 -srcstorepass -deststoretype jks -destkeystore keystore.jks -deststorepass {admin password}<\/code><\/p>\n

After completing the above steps, you should get the\u00a0following message:
\nEntry for alias s1as successfully imported.
\nImport command completed: 1 entries successfully imported, 0 entries failed or canceled<\/em><\/p>\n

6. Restart Glassfish (below command depends on your Glassfish installation)<\/strong>
\nservice glassfish start<\/code><\/strong>
\nor
\n\/usr\/local\/glassfish-3.1\/glassfish\/asadmin start-domain<\/code><\/p>\n

Now your custom SSL has been deployed. You can verify the cert using the\u00a0following command:<\/p>\n

openssl s_client -showcerts -connect glassfish-server-ip:443<\/code><\/p>\n

Now you now have a Glassfish server running with your custom SSL cert and you should not be receiving any security warnings while accessing via Browser.
\nHope this helps \ud83d\ude42<\/p>\n","protected":false},"excerpt":{"rendered":"

  GlassFish is an open-source application server project started by Sun Microsystems for the Java \u00a0platform and now sponsored by Oracle Corporation. It helps in developing scalable and portable applications. One issue which always comes up while deploying Glassfish on live is setting up custom SSL. The Glassfish provides a predefined SSL cert with every […]<\/p>\n","protected":false},"author":563,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":30,"footnotes":""},"categories":[2348,1],"tags":[4217,4218],"class_list":["post-42445","post","type-post","status-publish","format-standard","hentry","category-devops-technology","category-technology","tag-glassfish","tag-java-keystore"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t