Jboss SSL Generation and configuration

Jboss SSL Generation PROCESS

STEP 1:

Generate a Keystore and a certificate and place them in

server\default\conf folder.

STEP 2:

Then open the file server.xml in deploy/jbossweb-tomcat55.sar folder

And enter the below string

maxThreads="100" strategy="ms" maxHttpHeaderSize="8192"

emptySessionPath="true"

scheme="https" secure="true" clientAuth="false"

keystoreFile="${jboss.server.home.dir}/conf/jbosseg.jks"

keystorePass="changeit" sslProtocol = "TLS" crlFile="${jboss.server.home.dir}/conf/pubjboss.crt" />

keystoreFile : keystore path and file name.

KeystorePass : keystore password

CrlFile : certificate file name.

STEP 3:

Set the default path of the trusted key store to the keystore in run .bat in Jboss/bin

And add the below code and password

-Djavax.net.ssl.trustStore="D:\j2sdk1.4.2_10\jre\lib\security\1cacerts" -Djavax.net.ssl.trustStorePassword=changeit

(or)

We can use the below to set the default keystore if we have not given the above step

Then import the above-generated certificate to

j2sdk\jre\lib\security\cacerts

STEP 4:

Now start the Jboss.

NOTE:

If we need to communicate to any other servers on ssl then import the certificate of that server to the keystore.