{"id":4280,"date":"2018-06-13T00:10:02","date_gmt":"2018-06-13T08:10:02","guid":{"rendered":"https:\/\/cheapsslsecurity.com\/blog\/?p=4280"},"modified":"2021-01-26T07:31:21","modified_gmt":"2021-01-26T15:31:21","slug":"install-ssl-certificate-on-oracle-glassfish-server","status":"publish","type":"post","link":"https:\/\/cheapsslsecurity.com\/blog\/install-ssl-certificate-on-oracle-glassfish-server\/","title":{"rendered":"Oracle GlassFish SSL Installation: Here\u2019s How to do it"},"content":{"rendered":"

Step-by-step instructions to install an SSL certificate on Oracle GlassFish<\/span><\/h2>\n

Oracle GlassFish server, also known as GlassFish, is an open-source application server. The GlassFish project was started by Sun Microsystems for the Java platform and now it\u2019s sponsored by Oracle Corporation. The first version of GlassFish was launched in 2007 and the version 5, released in 2017 is the latest one.<\/p>\n

\"oracle<\/p>\n

Enough with the introduction, let\u2019s get to the point you\u2019re here for\u2014SSL installation on Oracle GlassFish server. Follow the below steps to generate a CSR and install an SSL certificate on GlassFish.<\/p>\n

Generate Private Key<\/h2>\n
#keytool -keysize 2048 -genkey -alias s1as -keyalg RSA -dname \"CN=*.mydomain.com<\/strong>,O=Myorganization<\/strong>,L=city<\/strong>,S=state<\/strong>,C=country<\/strong>\" -keypass changeit -storepass changeit -keystore keystore.jks<\/pre>\n
 <\/p>\n
You\u2019ll need to replace the bold parts of the above syntax with your details. Here\u2019s what the details represent:<\/p>\n
CN:<\/strong> www.yourdomaninname.com or yourdomainname.com<\/p>\n
O:<\/strong> Write the full name of your organization without any special characters. If you want to issue an OV or an EV SSL certificate, you must type in the legal name of your organization.<\/p>\n
L:<\/strong> Write the full name of your or your organization\u2019s city.<\/p>\n
S:<\/strong> Write the full name of your or your organization\u2019s state.<\/p>\n
C:<\/strong> Your 2-digit country code<\/p>\n
Note: <\/strong>Once you run the above command, you will be asked to enter the password of keystore. Make sure that the keystore password is same as the GlassFish\u2019s master password. If you have forgotten your password and hadn\u2019t changed it from the beginning, changeit<\/strong> should be your default password.<\/em><\/p>\n
Once you enter the details, you will be asked to verify the accuracy of the details you just entered. To confirm, type y<\/strong> and hit enter. Now you\u2019ll be asked to enter the key password. Press enter to keep the key password same as the keystore password.<\/p>\n
 <\/p>\n
Generate CSR<\/h2>\n
Run the below command to generate a CSR:<\/p>\n
> keytool -certreq -alias youralias -file yourcsrname.csr -keystore yourkeystorename.jks<\/pre>\n
 <\/p>\n
Download Certificate Files<\/h2>\n
Your certificate authority (CA) would\u2019ve sent you the certificate files. Ideally, it will be sent in a zip file and it\u2019d have three files.<\/p>\n
 <\/p>\n
Import Certificate Files<\/h2>\n
Once you\u2019ve downloaded your certificate files, you\u2019d need to import them into the keystore. Enter the below commands for different files.<\/p>\n
keytool -import -trustcacerts -alias root -file (ROOT CERTIFICATE FILE NAME) -keystore domain.key<\/pre>\n
 <\/p>\n
keytool -import -trustcacerts -alias intermed -file (INTERMEDIATE CA FILE NAME) -keystore domain.key<\/pre>\n
 <\/p>\n
keytool -import -alias mydomain.com -keystore keystore.jks -trustcacerts -file mydomain.com.crt<\/pre>\n
 <\/p>\n
Import Files into the default keystore<\/h2>\n
It helps in developing scalable and portable applications. To import files from the original keystore to the default keystore, you\u2019d need to run the following command:<\/p>\n
> keytool -importkeystore -srckeystore yourkeystorename.jks -destkeystore keystore.jks<\/pre>\n
 <\/p>\n
Enable HTTPS in HTTP-Listener-2<\/h2>\n
To enable HTTPS in GlassFish\u2019s HTTP-Listener, follow the outlined steps:<\/p>\n