Sample configuration

This example illustrates how you might configure EAServer to use JSSE:

1. From the Web Management Console, expand the Servers folder.

2. Expand the server for which you are configuring JSSE.

3. Select the JSSE Configuration tab.

4. Modify these properties:

   • SSL Key Store and SSL Trust Store – point to the keystore file named keystore.jks.

   • SSL Key Store Type and SSL Trust Store Type – JKS.

   • SSL Key Store Password – changeit.

   • SSL Trust Store Password – changeit, if you are using default trust store that ships with the JDK.

   • FIPS Mode Enabled – select this option.

   There are four entries in the keystore.jks file, one of which is a key entry used to start an SSL listener.

5. Specify a key entry name for the associated profile.

6. Create a new security profile that uses a TLS security characteristic:

   1. From the Security folder, right-click Profiles and select Add.

   2. Follow the wizard to create a new security profile using these values:

      • Security Profile Name – test_tls.

      • Certificate Label – use keytool commands to identify a label. For example:

        keytool -list -keystore ${keystore}
        

        You can see keyentry and any associated alias. Use the desired entry name as the certificate label.

      • Security Characteristics – select domestic_tls from the drop-down list.

   3. Click Apply to apply your changes.

7. Define an HTTPS listener:

   1. From the Servers folder, expand the server to which you are adding the listener.

   2. Select the Listeners properties tab and click https1.

   3. Select the General tab and add an HTTPS listener at port 8001 using these settings:

      • Protocol – https

      • Port – 8001

      • Security Profile – test_tls

   4. Click Apply to apply your changes.

8. Add the listener to the listener properties.