如何在glassfish 3.1.2.2上安裝ssl

Question

如何在glassfish 3.1.2.2上安裝ssl？

我已經擁有root和intermediate的證書。 證書准備好了。

問題是如何安裝？ 我已經關注了http://javadude.wordpress.com/2010/04/06/getting-started-with-glassfish-v3-and-ssl/和http://eugenedvorkin.com/installing-thawte-certificate-的指南上與GlassFish 3-11服務器換HTTPS流量/

但仍然失敗，這是我試圖做的。

1. keytool -genkeypair -keyalg RSA -keystore keystore.jks -keypass changeit -storepass changeit -alias s1as

2. keytool -certreq -alias s1as -file s1as.csr -keystore keystore.jks -storepass changeit

3. keytool -import -v -trustcacerts -alias s1as -file root.crt -keystore cacerts.jks -storepass changeit

4. keytool -import -v -trustcacerts -alias Intermediate -file intermediate.crt -keystore cacerts.jks -storepass changeit

在此步驟4之后，它將創建keystore.jks和cacerts.jks 。 之后，我將這2個文件復制到glassfish-3.1.2.2\\glassfish\\domains\\domain1\\config

打開管理控制台並設置為http偵聽器2，

• 證書NickName：密鑰庫
• 密鑰庫：keystore.jks
• 信任算法：sha1
• 最長證書長度：5
• 信任商店：cacerts.jks

但是當我訪問https：\\ localhost：8181時

>WARNING: GRIZZLY0007: SSL support could not be configured!
java.io.IOException: sha1 TrustManagerFactory not available
    at com.sun.grizzly.util.net.jsse.JSSE14SocketFactory.init(JSSE14SocketFactory.java:188)
    at com.sun.grizzly.config.SSLConfigHolder.initializeSSL(SSLConfigHolder.java:363)
    at com.sun.grizzly.config.SSLConfigHolder.configureSSL(SSLConfigHolder.java:241)
    at com.sun.grizzly.config.GrizzlyEmbeddedHttps$LazySSLInitializationFilter.execute(GrizzlyEmbeddedHttps.java:202)
    at com.sun.grizzly.DefaultProtocolChain.executeProtocolFilter(DefaultProtocolChain.java:137)
    at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:104)
    at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:90)
    at com.sun.grizzly.http.HttpProtocolChain.execute(HttpProtocolChain.java:79)
    at com.sun.grizzly.ProtocolChainContextTask.doCall(ProtocolChainContextTask.java:54)
    at com.sun.grizzly.SelectionKeyContextTask.call(SelectionKeyContextTask.java:59)
    at com.sun.grizzly.ContextTask.run(ContextTask.java:71)
    at com.sun.grizzly.util.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:532)
    at com.sun.grizzly.util.AbstractThreadPool$Worker.run(AbstractThreadPool.java:513)
    at java.lang.Thread.run(Thread.java:722)

>SEVERE: ProtocolChain exception
java.lang.NullPointerException
    at com.sun.grizzly.filter.SSLReadFilter.newSSLEngine(SSLReadFilter.java:352)
    at com.sun.grizzly.filter.SSLReadFilter.obtainSSLEngine(SSLReadFilter.java:399)
    at com.sun.grizzly.filter.SSLReadFilter.execute(SSLReadFilter.java:159)
    at com.sun.grizzly.DefaultProtocolChain.executeProtocolFilter(DefaultProtocolChain.java:137)
    at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:104)
    at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:90)
    at com.sun.grizzly.http.HttpProtocolChain.execute(HttpProtocolChain.java:79)
    at com.sun.grizzly.ProtocolChainContextTask.doCall(ProtocolChainContextTask.java:54)
    at com.sun.grizzly.SelectionKeyContextTask.call(SelectionKeyContextTask.java:59)
    at com.sun.grizzly.ContextTask.run(ContextTask.java:71)
    at com.sun.grizzly.util.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:532)
    at com.sun.grizzly.util.AbstractThreadPool$Worker.run(AbstractThreadPool.java:513)
    at java.lang.Thread.run(Thread.java:722)

>SEVERE: ProtocolChain exception
java.lang.NullPointerException
    at com.sun.grizzly.filter.SSLReadFilter.newSSLEngine(SSLReadFilter.java:352)
    at com.sun.grizzly.filter.SSLReadFilter.obtainSSLEngine(SSLReadFilter.java:399)
    at com.sun.grizzly.filter.SSLReadFilter.execute(SSLReadFilter.java:159)
    at com.sun.grizzly.DefaultProtocolChain.executeProtocolFilter(DefaultProtocolChain.java:137)
    at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:104)
    at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:90)
    at com.sun.grizzly.http.HttpProtocolChain.execute(HttpProtocolChain.java:79)
    at com.sun.grizzly.ProtocolChainContextTask.doCall(ProtocolChainContextTask.java:54)
    at com.sun.grizzly.SelectionKeyContextTask.call(SelectionKeyContextTask.java:59)
    at com.sun.grizzly.ContextTask.run(ContextTask.java:71)
    at com.sun.grizzly.util.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:532)
    at com.sun.grizzly.util.AbstractThreadPool$Worker.run(AbstractThreadPool.java:513)
    at java.lang.Thread.run(Thread.java:722)

有人幫我解決這個問題嗎？ Thx b4

Answer 1

這個配置對我有用：

（在http-listener-2的SSL選項卡上）

• SSL3 - [啟用]
• TLS - [啟用]
• 客戶端驗證 - [啟用]
• 證書NickName：s1as
• 密鑰庫：[空]
• 信任算法：[空]
• 最長證書長度：5

• 信任商店：[空]

• 密碼套房：[全選]

希望能幫助到你。