Sun Web Server 7 & Self Signed Certificate
I created a self signed certificate using CLI in web server 7.
I'm trying to install this certificate using the admin console, but not sure what to enter in the window "Enter Certificate Data " .
I don't know where does the certficate file gets created?
Anybody done that before.
[307 byte] By [
aar] at [2007-11-26 10:27:06]

# 1
i guess, you are not doing it right.
attached below is a how to for doing the same using our CLI, (INSTALL_ROOT/bin/wadm)
= start admin server
= now, use our bin/wadm CLI to connect to admin server
wadm>create-selfsigned-cert --servername=machinename --nickname=MyServerCert --token=internal
wadm>create-http-listener --servername=machinename --defaultvs=machinename --secure=true --listenerport=443 http-listener-ssl
Finally I need to set a few things on my new SSL listener: at the very least it needs to be enabled and it needs to be associated with the nickname of the cert it's going to use:
wadm>set-ssl-prop --httplistener=http-listener-ssl enabled=true
wadm>set-ssl-prop --httplistener=http-listener-ssl server-cert-nickname=MyServerCert
Of course, there are a number of other settings I might want to adjust for a real production server, this is just a bare bones working configuration. Refer to the CLI commands for more possibilities (until the real products docs are available).
After all the configuration is done, I just need to deploy this new configuration and start my server:
wadm>deploy-config machinename
wadm>start-instance
where machinename is the hostname.domainname or whatever is obtained by running
wadm list-configs
hope this helps
I can now go and check https://host.red.iplanet.com:8090 from a browser to verify the setup is working.
That's a bare bones invocation which will work and may be ok for developer experimentation. However, review all the options to create-selfsigned-cert, you may want to specify a number of them to create a slightly more realistic cert.
With the certificate installed, I now need a listener on some port which will have SSL enabled.