Changes between Version 3 and Version 4 of ESGF-Security


Ignore:
Timestamp:
Mar 5, 2013 2:44:24 PM (9 years ago)
Author:
vegasm
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • ESGF-Security

    v3 v4  
    77To install and configure SSL support on Tomcat 6, you need to follow these simple steps:
    88
    9 1. Create a keystore file to store the server's private key and self-signed certificate by executing the following:
     9Create a keystore file to store the server's private key and self-signed certificate by executing the following:
    1010{{{
    1111keytool -genkey -alias tomcat -keyalg RSA
    1212password: changeit
    13 }}}
    14 
     13}}}
    1514This command will create a file in your user home directory named ".keystore". This keystore contains a certificate whose alias is ''tomcat''
    1615
    17 2. Download the ESGF Truststore which contains the trusted CA's and add your tomcat certificate:
     16Download the ESGF Truststore which contains the trusted CA's and add your tomcat certificate:
    1817
    19 You have two options:
    20  1. Download the ESGF truststore from here https://rainbow.llnl.gov/dist/certs/esg-truststore.ts and add your tomcat certificate by yourself
    21  2. Download the attachment:esg-truststore.ts which contains the tomcat pem. You can also download the attachment:.keystore
     181. You can download the ESGF truststore from here https://rainbow.llnl.gov/dist/certs/esg-truststore.ts and add your tomcat certificate by yourself or download the attachment:esg-truststore.ts which contains the tomcat pem. You can also download the attachment:.keystore
    2219
    23 3. Uncomment the ''SSL HTTP/1.1 Connector'' entry in ''$CATALINA_BASE/conf/server.xml'' and add the following:
     202. Uncomment the ''SSL HTTP/1.1 Connector'' entry in ''$CATALINA_HOME/conf/server.xml'' and add the following:
    2421{{{
    2522<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol"  SSLEnabled="true" maxThreads="150" scheme="https" secure="true"
    … …  
    2825}}}
    2926
    30 4. Deploy esg-orp.war into tomcat 6
     27Deploy esg-orp.war into tomcat 6
     28
     29 1. Start tomcat server. Run '''$CATALINA_HOME/bin/startup.bat on windows''' or '''$CATALINA_HOME/bin/startup.sh''' on Linux
     30 1. Move the attachment:esg-orp.war to '''$CATALINA_HOME/webapps'''. A new directory called 'esg-orp' will be created.
    3131
    3232