View source for OPEN SSL - Create pkcs12 clientAuth certificat keystore (SSO Token PopUp) from CertificationAuthority and configure Tomcat connector

On linux server :
<br/><br/>

- '''initialize new certificate''' 
<syntaxhighlight lang="javascript"> openssl req -new -newkey rsa:4096 -keyout "website.fr.key" -out "website.fr.csr" </syntaxhighlight>

<br/>- '''upload .csr on the CA''' Certification Authority website of your company
<br/>- '''download .crt from the CA'''
<br/>- '''upload .crt to your server'''

<br/>
- '''generate keystore'''
<syntaxhighlight lang="javascript">
cat website.fr.key > server.pem
cat website.fr.crt >> server.pem
openssl pkcs12 -export  -in server.pem -out keystore.p12
</syntaxhighlight>

- '''check keystore'''
<syntaxhighlight lang="javascript">
openssl pkcs12 -nokeys -info -in keystore.p12
</syntaxhighlight>

- '''update tomcat connector'''
<syntaxhighlight lang="javascript">
cd tomcat/conf/
vi server.xml
</syntaxhighlight>
<syntaxhighlight lang="javascript">
<Connector 
protocol="org.apache.coyote.http11.Http11NioProtocol"
port=10xxx
address=10.xxx.xxx.xx
scheme="https"
secure="true"
SSLEnabled="true"
keystoreFile="/xxxxxx/tomcat/certificate/keystore.p12"
keystorePass="changeit"
keystoreType="PKCS12"
clientAuth="true"
sslProtocol="TLS" />
</syntaxhighlight>

<br/>
- '''this is now working on https''' 🎉
<br/>