Replicating Using Mutual SSL

Generate a private-public key pair in a KeyStore.

Create or obtain the certificate:

• Self-signed: Export the certificate from the KeyStore.
• CA-signed: Generate a certificate request and send it to the CA.

Import the certificate into a TrustStore.

Open a command-line window or terminal. To create the private-public key pair, enter the following command, using option values from the table below:

keytool -genkeypair -keyalg RSA -validity 3650 -alias alias -keystore keystorename.keystore  -keypass key_password -storepass  store_password -dname "CN=Host Name, OU=Group Name, O=Company Name,L=City Name, S=State, C=Country_ Code"

To export the certificate, enter the following command using option values from the table below:

keytool -exportcert -alias alias -file cert_file -storetype jks -keystore keystore -storepass store_password

Open a command-line window or terminal. To create the private key, enter the following command, using option values from the table below:

openssl genrsa -out keyname.key 2048

To generate a certificate request, enter the following command, using option values from the table below:

openssl req -new -key keyname.key -out key_request.csr

Either sign the certificate request or send the request to a CA.

To sign the certificate request, enter the following command, using option values from the table below:

openssl x509 -req -days 3650 -in key_request.csr -signkey keyname.key -out certificate.cer

To add your private key and the signed certificate to a pkcs#12 file, enter the following command, using option values from the table below:

openssl pkcs12 -keypbe PBE-SHA1-3DES -certpbe PBE-SHA1-3DES -export -in certificate.cer -inkey keyname.key -out pkcs12_archive.pfx -name "alias"

Open the User Management page for the author instance. (http://localhost:4502/libs/granite/security/content/useradmin.html)

To open the properties of your user account, click your user name.

If the Create KeyStore link appears in the Account Settings area, click the link. Configure a password and click OK.

In the Account Settings area, click Manage Keystore.

Click Add Private Key From Key Store File.

Click Select Key Store file, then browse for and select the author.keystore file or the author.pfx file if using pkcs#12, then click Open.

Enter an alias and the password for the key store. Enter the alias and password for the private key, then click Submit.

Close the KeyStore Management dialog box.

Open the User Management page for the author instance. (http://localhost:4502/libs/granite/security/content/useradmin.html)

To open the properties of your user account, click your user name.

If the Create TrustStore link appears in the Account Settings area, click the link, create a password for the TrustStore and click OK.

In the Account Settings area, click Manage TrustStore.

Click Add Certificate From CER File.

Clear the Map Certificate to User option. Click Select Certificate File, select publish.cer, and click Open.

Close the TrustStore Management dialog box.