Project

General

Profile

1
Replication set up for tomcat4 standalone (java1.4)
2
1. Generate keys in java default key store - $jAVA_HOME/jre/lib/security/cacerts:
3
   keytool -genkey -alias pinetomcat -keyalg RSA -validity 800 -keystore cacerts
4
   Note: when ask you name, you should put your host name, such as "pine.nceas.ucsb.edu"
5
         The state name should be full name, e.g. California.
6

    
7
2. Generate certificate:
8
   keytool -export -alias pinetomcat -file pinetomcatjava14.cert -keystore cacerts
9

    
10
3. Configure server.xml for tomcat 4.
11
   Removed the comment for port 8443. In factory element add an attribute:
12
   keystoreFile="/usr/java/j2sdk1.4.1_01/jre/lib/security/cacerts"
13
   In windows machine, it will look like keystoreFile="C:\usr\java\j2sdk1.4.1_01\jre\lib\security\cacerts"
14
   
15
4. Import other server's certificate to cacerts:
16
    keytool -import -alias fatalitomcatjava14 -file ~/keys/fatalitomcat/fatalitomcatjava14.cert -keystore cacerts
17

    
18
5. Restart tomcat
19

    
20
6. Set up xml_replication table in metacat
21

    
22
Replication set up for Apache2 (with Tomcat4):
23
1. Generate keys by openssl (In pine machine)
24
   openssl req -new -out REQ.pem -keyout server.key
25
   Note: the first quetion is asked to set your password.
26

    
27
2. Generate certificate:
28
   openssl req -x509 -days 800 -in REQ.pem -key server.key -out server.crt
29

    
30
3. Put server.key into $APACHE_HOME/conf/ssl.key and server.crt into APACHE_HOME/conf/ssl.crt
31

    
32
4. Import other server's certificate to java's cacerts:
33
   keytool -import -alias pinetomcat14 -file pinetomcatjava14.cert -keystore cacerts
34

    
35
5. Restart apache and tomcat
36

    
37
6. Set up xml_replication table in metacat
38

    
39
The example to set up a key:
40
Country Name (2 letter code) [GB]:US
41
State or Province Name (full name) [Berkshire]:California
42
Locality Name (eg, city) [Newbury]:Santa Barbara
43
Organization Name (eg, company) [My Company Ltd]:UCSB
44
Organizational Unit Name (eg, section) []:NCEAS
45
Common Name (eg, your name or your server's hostname) []:dev.nceas.ucsb.edu
46
(Note: don't put port number here)
47
Email Address []:tao@nceas.ucsb.edu
48

    
49
For generate no password key and certificate (Alternative way):
50
1. openssl genrsa -out server.key 1024
51
2. openssl req -new -x509 -days 900  -key server.key -out server.crt
(15-15/15)