This HTML5 document contains 103 embedded RDF statements represented using HTML+Microdata notation.

The embedded RDF content will be recognized by any processor of HTML5 Microdata.

Subject Item

n21:this

foaf:made

n2:VirtSetupSSLVirtuoso

Subject Item

n12:this

sioc:creator_of

n2:VirtSetupSSLVirtuoso

Subject Item

n14:item

n13:services_of

n2:VirtSetupSSLVirtuoso

Subject Item

n5:this

sioc:creator_of

n2:VirtSetupSSLVirtuoso

Subject Item

n23:VOS

sioc:container_of

n2:VirtSetupSSLVirtuoso

atom:entry

n2:VirtSetupSSLVirtuoso

atom:contains

n2:VirtSetupSSLVirtuoso

Subject Item

n2:VirtSetupSSLVirtuoso

rdf:type

sioct:Comment atom:Entry

dcterms:created

2018-04-13T12:07:58.741434

dcterms:modified

2018-04-26T10:59:16.781947

rdfs:label

VirtSetupSSLVirtuoso

foaf:maker

n21:this n46:this

dc:title

VirtSetupSSLVirtuoso

opl:isDescribedUsing

n7:rdf

sioc:has_creator

n12:this n5:this

sioc:attachment

n26:png n27:png n28:png n29:png n30:png n31:png n32:png n33:png n34:png n35:png n36:png n37:png n38:png n39:png n40:png n41:png n42:png n43:png n44:png

sioc:content

%META:TOPICPARENT{name="VOSIndex"}% ---+ Virtuoso Certificate Authority Setup The steps that follow guide you through the process of setting up your Virtuoso instance to issue CA-Authority-notarized X.509 certificates that include <nop>WebID watermarks. %TOC% ---++ Prerequisites The following packages should be installed: * [[https://virtuoso.openlinksw.com/download/][conductor_dav.vad]] ---++ Generating CA-Authority Certificate (.p12 or .pfx) ---+++ Manually Generating CA-Authority Certificate 1 Go to the <b><code><nowiki>http://cname:port/conductor</nowiki></code></b> URL, enter the DBA user credentials. 1 Go to <b>System Admin</b> &#8594; <b>Security</b> %BR%%BR%<img src="%ATTACHURLPATH%/sca7.png" />%BR%%BR% 1 Fill in the form. For example: * <b>Country</b>: US * <b>State</b>: MA * <b>Organization</b>: Example Inc. * <b>Organization Unit</b>: Example * <b>Name</b>: Root CA * <b>e-mail</b>: <nowiki>dba@example.com</nowiki> %BR%%BR%<img src="%ATTACHURLPATH%/sca8.png" />%BR%%BR% 1 Click <b>Generate</b>. 1 The CA-Authority Certificate should be successfully generated: %BR%%BR%<img src="%ATTACHURLPATH%/sca9.png" />%BR%%BR% ---+++ Importing CA-Authority Certificate 1 [[http://id.myopenlink.net/certgen/][Generate CA-Authority Certificate]] that: * has <b><code><nowiki>http://localhost:8890/dataspace/person/dba#this</nowiki></code></b> as <nop>WebID * is <b>Certification Authority (CA) Identity</b> * has <b>Self-Signed</b> Issuer 1 Go to the <b><code><nowiki>http://cname:port/conductor</nowiki></code></b> URL, enter the "dba" user credentials. 1 Go to <b>System Admin</b> &#8594; <b>User Accounts</b>. %BR%%BR%<img src="%ATTACHURLPATH%/sca0.png" />%BR%%BR% 1 For user <b>dba</b>, click <b>Edit</b>: %BR%%BR%<img src="%ATTACHURLPATH%/sca1.png" />%BR% <img src="%ATTACHURLPATH%/sca2.png" />%BR%%BR% 1 In the presented form for <b>PKCS12 file</b>, click <b>Choose File</b> and select your CA Certificate; for example, with name <b>example.p12</b>: %BR%%BR%<img src="%ATTACHURLPATH%/sca3.png" />%BR%%BR% 1 Enter <b>Key Name</b> <code>id_rsa</code> and <b>Key Password</b> the password your CA Certificate has: %BR%%BR%<img src="%ATTACHURLPATH%/sca4.png" />%BR%%BR% 1 Click <b>Import Key</b> 1 On a successful import, the certificate should now be presented in the <b>Cryptographic Keys</b> list: %BR%%BR%<img src="%ATTACHURLPATH%/sca5.png" />%BR%%BR% 1 Click <b>Save</b> 1 Go to <b>System Admin</b> &#8594; <b>Security</b> &#8594; <b>Public Key Infrastructure</b> 1 The CA Certificate Details should be presented: %BR%%BR%<img src="%ATTACHURLPATH%/sca6.png" />%BR%%BR% ---++ Generating SSL Key Using the Conductor UI <i><b>Note</b> The following assumes the CA-Authority Certificate has been generated/imported already, as through the sections above.</i> 1 Go to the <b><code><nowiki>http://cname:port/conductor</nowiki></code></b> URL, enter the DBA user credentials. %BR%%BR% <img src="%ATTACHURLPATH%/Picture02.png" />%BR%%BR% 1 Go to <b>System Admin</b> &#8594; <b>Security</b>. %BR%%BR%<img src="%ATTACHURLPATH%/Picture05.png" />%BR%%BR% 1 Click <b>Configure HTTPS Listeners</b> %BR%%BR%<img src="%ATTACHURLPATH%/Picture06.png" />%BR%%BR% 1 Edit the new listener, and click <b>Generate New</b> %BR%%BR%<img src="%ATTACHURLPATH%/Picture07.png" />%BR%%BR% 1 Click <b>Save</b> %BR%%BR%<img src="%ATTACHURLPATH%/Picture08.png" />%BR%%BR% ---++ Setting Up Firefox 1 In the <b>Preferences</b> dialog, open the <b>Advanced</b> tab, and click the <b>View certificates</b> button. 1 Click the <b>Add exception</b> button and enter the address of the HTTPS server you've just configured, i.e., <b><code><nowiki>https://virtuoso.example.com:4433/</nowiki></code></b> 1 Click <b>OK</b>, and confirm the exception. %BR%%BR%<img src="%ATTACHURLPATH%/Picture_2.png" style="wikiautogen"/>%BR%%BR% ---++ Related * [[VirtSPARQLEndpointProtection][Safeguarding your Virtuoso-hosted SPARQL Endpoint]] * [[VirtTipsAndTricksGuideSPARQLEndpointProtection][SPARQL Endpoint Protection Methods Collection]] * [[http://docs.openlinksw.com/virtuoso/][Virtuoso documentation]] * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html#rdfsupportedprotocolendpoint][SPARQL Service Endpoint]] * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html#rdfsupportedprotocolendpointuri][Service Endpoint Security]] * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html#sparqwebservicetbl][Managing a SPARQL Web Service Endpoint]] * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html][SPARQL]] * [[VirtTipsAndTricksGuide][Virtuoso Tips and Tricks Collection]] * [[VirtSPARQLDET][SPARQL Endpoint DET Configuration Guide]] * [[VirtSPARQLSecurityWebID][WebID Protocol & SPARQL Endpoint ACLs Tutorial]] * [[VirtOAuthSPARQL][SPARQL OAuth Tutorial]] * [[VirtTipsAndTricksGuideSPARQLEndpoints][Securing SPARQL endpoints]] * [[http://ods.openlinksw.com/wiki/ODS/OdsSPARQLAuth][SPARUL over SPARQL using the http://cname:port/sparql-auth endpoint]] * [[VirtAuthServerUI][Virtuoso Authentication Server UI]] * [[VirtSPARQLSSL][Manage a SPARQL-WebID based Endpoint]] * [[VirtSetupSSL][Configure Virtuoso instance as an X.509 Certificate Authority and HTTPS listener]] * [[http://ods.openlinksw.com/wiki/ODS/ODSSetupSSL][Configure Virtuoso+ODS instance as an X.509 Certificate Authority and HTTPS listener]] * [[http://ods.openlinksw.com/wiki/ODS/VirtODSSecurityWebID][WebID Protocol Support in OpenLink Data Spaces]]. * Manage ODS Dataspaces Objects <nop>WebID Access Control Lists (ACLs): * [[http://ods.openlinksw.com/wiki/ODS/ODSBriefcaseWebID][ODS Briefcase WebID based ACL Guide]] * [[http://ods.openlinksw.com/wiki/ODS/ODSBriefcaseWebIDPerson][Person Entity WebID based ACL Guide]] * [[http://ods.openlinksw.com/wiki/ODS/ODSBriefcaseWebIDGroup][Group Entity WebID based ACL Guide]] * [[http://ods.openlinksw.com/wiki/ODS/ODSBriefcaseWebIDPublic][Public WebID based ACL Guide]] * [[http://ods.openlinksw.com/wiki/ODS/ODSFeedManagerWebIDACL][ODS Feed Manager WebID based ACL Guide]] * [[http://ods.openlinksw.com/wiki/ODS/ODSFeedManagerWebIDACLPerson][Person Entity Specific ACL]] * [[http://ods.openlinksw.com/wiki/ODS/ODSFeedManagerWebIDACLGroup][Group Entity Specific ACL]] * [[http://ods.openlinksw.com/wiki/ODS/ODSFeedManagerWebIDACLPublic][Public Specific ACL for anyone with a WebID]] * [[http://ods.openlinksw.com/wiki/ODS/ODSCalendarWebIDACL][ODS Calendar WebID based ACL Guide]] * [[http://ods.openlinksw.com/wiki/ODS/ODSCalendarWebIDACLPerson][Person Entity Specific ACL]] * [[http://ods.openlinksw.com/wiki/ODS/ODSCalendarWebIDACLGroup][Group Entity Specific ACL]] * [[http://ods.openlinksw.com/wiki/ODS/ODSCalendarWebIDACLPublic][Public Specific ACL for anyone with a WebID]] * [[http://ods.openlinksw.com/wiki/ODS/ODSBookmarksWebIDACL][ODS Bookmark Manager WebID based ACL Guide]] * [[http://ods.openlinksw.com/wiki/ODS/ODSBookmarksWebIDACLPerson][Person Entity Specific ACL]] * [[http://ods.openlinksw.com/wiki/ODS/ODSBookmarksWebIDACLGroup][Group Entity Specific ACL]] * [[http://ods.openlinksw.com/wiki/ODS/ODSBookmarksWebIDACLPublic][Public Specific ACL for anyone with a WebID]] * [[http://ods.openlinksw.com/wiki/ODS/ODSAddressBookWebIDACL][ODS Addressbook WebID based ACL Guide]] * [[http://ods.openlinksw.com/wiki/ODS/ODSAddressBookWebIDACLPerson][Person Entity Specific ACL]] * [[http://ods.openlinksw.com/wiki/ODS/ODSAddressBookWebIDACLGroup][Group Entity Specific ACL]] * [[http://ods.openlinksw.com/wiki/ODS/ODSAddressBookWebIDACLPublic][Public Specific ACL for anyone with a WebID]] * [[http://ods.openlinksw.com/wiki/ODS/ODSPkiSetup][Guide for Set up a X.509 certificate issuer and HTTPS listener and generate ODS user certificates.]] * [[http://ods.openlinksw.com/wiki/ODS/VirtODSPubSubHub][Setting up PubSubHub in ODS]] * [[http://ods.openlinksw.com/wiki/ODS/VirtPubSubHub][PubSubHubBub Demo Client Example]] * [[http://ods.openlinksw.com/wiki/ODS/VirtFeedPubSubHub][Feed subscription via PubSubHub protocol Example ]] * [[http://ods.openlinksw.com/wiki/ODS/VirtPubSubHubACL][Setting Up PubSubHub to use WebID Protocol or IP based control lists]] * [[http://ods.openlinksw.com/wiki/ODS/OdsKeyImport][CA Keys Import using Conductor]] * [[http://ods.openlinksw.com/wiki/ODS/ODSGenerateX509Certificate][Generate an X.509 Certificate hosted WebID Guide]] * [[http://ods.openlinksw.com/wiki/ODS/ODSGenerateWebIDX509CertOSKeystore][Generate an X.509 Certificate (with a WebID watermark) to be managed by host operating system keystore]] * [[http://ods.openlinksw.com/wiki/ODS/ODSGenerateWebIDX509CertBrsKeystore][Generate an X.509 Certificate (with a WebID watermark) to be managed by a browser-based keystore]] * [[http://ods.openlinksw.com/wiki/ODS/ODSWebIDIdP][Using Virtuoso's WebID Verification Proxy Service with a WebID-bearing X.509 certificate]] * [[http://ods.openlinksw.com/wiki/ODS/ODSWebIDIdpProxy][Using Virtuoso's WebID Identity Provider (IdP) Proxy Service with an X.509 certificate]] * [[http://ods.openlinksw.com/wiki/ODS/ODSBriefcaseWebIDShareFile][ODS Briefcase WebID Protocol Share File Guide]] * [[http://esw.w3.org/topic/foaf+ssl][WebID Protocol Specification]] * [[https://foaf.me/simpleLogin.php][Test WebID Protocol Certificate page]] * [[http://test.foafssl.org/cert/][WebID Protocol Certificate Generation page]]

sioc:id

bb578edac30002c7d120ce0ae486bcc0

sioc:link

n2:VirtSetupSSLVirtuoso

sioc:has_container

n23:VOS

n13:has_services

n14:item

atom:title

VirtSetupSSLVirtuoso

sioc:links_to

n4: n8:ssl n9:php n10:ODSBookmarksWebIDACLGroup n11: n10:ODSBookmarksWebIDACLPublic n10:ODSBookmarksWebIDACL n10:ODSBookmarksWebIDACLPerson n10:ODSCalendarWebIDACLGroup n10:ODSCalendarWebIDACLPublic n10:ODSCalendarWebIDACL n10:ODSCalendarWebIDACLPerson n10:VirtPubSubHub n10:VirtFeedPubSubHub n10:ODSPkiSetup n10:VirtODSPubSubHub n10:ODSAddressBookWebIDACLGroup n10:ODSAddressBookWebIDACLPublic n10:ODSAddressBookWebIDACL n10:ODSAddressBookWebIDACLPerson n10:ODSSetupSSL n10:VirtODSSecurityWebID n17:html n10:OdsSPARQLAuth n18:rdfsupportedprotocolendpointuri n2:VirtSPARQLSSL n18:sparqwebservicetbl n19: n18:rdfsupportedprotocolendpoint n2:VirtSPARQLEndpointProtection n10:ODSFeedManagerWebIDACLGroup n2:VirtTipsAndTricksGuideSPARQLEndpointProtection n10:ODSFeedManagerWebIDACLPublic n10:ODSFeedManagerWebIDACL n10:ODSFeedManagerWebIDACLPerson n10:ODSBriefcaseWebIDGroup n10:ODSBriefcaseWebIDPublic n10:ODSBriefcaseWebID n10:ODSBriefcaseWebIDPerson n2:VirtTipsAndTricksGuide n2:VirtSetupSSL n24: n2:VirtSPARQLDET n2:VirtAuthServerUI n2:VirtTipsAndTricksGuideSPARQLEndpoints n10:ODSWebIDIdpProxy n10:ODSBriefcaseWebIDShareFile n10:ODSGenerateWebIDX509CertBrsKeystore n10:ODSWebIDIdP n10:ODSGenerateX509Certificate n10:ODSGenerateWebIDX509CertOSKeystore n2:VirtSPARQLSecurityWebID n10:VirtPubSubHubACL n10:OdsKeyImport

atom:source

n23:VOS

atom:author

n21:this

atom:published

2018-04-13T12:07:58Z

atom:updated

2018-04-26T10:59:16Z

sioc:topic

n23:VOS

Subject Item

n2:VOSIndex

sioc:links_to

n2:VirtSetupSSLVirtuoso