[KNOX-162] Support Providing Your own SSL Certificate

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.3.0
• Fix Version/s: 0.3.0
• Assignee: Larry McCay
• Reporter: Larry McCay
• Created: 26/Sep/13 00:15
• Updated: 28/Mar/19 14:12
• Resolved: 30/Sep/13 14:54

Description

For 0.3.0 we will support key passphrases that are the same as the keystore password.
In order to generate your own selfsigned cert/keystore and credential store:

Gateway identity keystore:
keytool -genkey -keyalg RSA -alias gateway-identity -keystore gateway.jks -storepass

{masterpassword} -validity 360 -keysize 2048

Gateway credential store:
keytool -genkey -alias credstore -keystore __gateway-credentials.jceks -storepass {masterpassword}

-validity 360 -keysize 1024 -storetype JCEKS

Place these files in the

{GATEWAY_HOME}

/conf/security/keystores directory prior to server startup.

NOTE: that the same masterpassword is being used for each store.