---+ Guide for Setting Up the Virtuoso HTTPS Listener using File System to host Certificate and Public Key

To enable the HTTPS listener, you will need a certificate.  Existing certificates may not 
have Subject Alternate Name, so you may want to acquire (or [[VirtGenerateX509Cert][generate]]) a new one.  

   1 Move <code>newcert.pem</code>, <code>newkey.pem</code>, and <code>cacert.pem</code> 
into the server's working directory.  In our test case, we put the keys in a '<code>keys</code>' 
sub-directory, and added the following lines to the <code>[HTTPServer]</code> section of the Virtuoso 
INI file (default, <code>virtuoso.ini</code>):
<verbatim> 
SSLPort                     = 4443
SSLCertificate              = ./keys/newcert.pem
SSLPrivateKey               = ./keys/newkey.pem
X509ClientVerifyCAFile      = ./keys/cacert.pem
X509ClientVerify            = 1
X509ClientVerifyDepth       = 15
</verbatim> 
   1 Also in the Virtuoso INI file, in the <code>[URIQA]</code> section, <code><nowiki>DefaultHost</nowiki></code>
(set to <code>localhost:8890</code> below) must be edited to correspond to the DNS-resolvable host name 
("CNAME") of the Virtuoso host, combined with the <code><nowiki>ServerPort</nowiki></code> as set in the 
<code>[HTTPServer]</code> section of the same INI file.  Default settings are seen here:
<verbatim>
[URIQA]
DynamicLocal = 1
DefaultHost  = localhost:8890
</verbatim>
For instance, if the CNAME of the host is <code>virtuoso.example.com</code>, and the 
<code><nowiki>ServerPort</nowiki></code> is <code>4321</code>, the <code><nowiki>DefaultHost</nowiki></code> should be set to 
<code>virtuoso.example.com:4321</code>
<verbatim>
[URIQA]
DynamicLocal = 1
DefaultHost  = virtuoso.example.com:4321
</verbatim>
   1 Start the Virtuoso server, and look at the log file.  Once HTTPS is up, you should see 
something like &mdash;
<verbatim> 
HTTPS Using X509 Client CA ....
HTTPS/X509 server online at 4443
</verbatim> 

---++ Setting Up Firefox 

   1 In the <b>Preferences</b> dialog, open the <b>Advanced</b> tab, and the <b>Encryption</b> 
subtab; then, click the <b>View certificates</b> button. 
%BR%%BR%<img src="%ATTACHURLPATH%/Picture_1.png" style="wikiautogen"/>%BR%%BR%
   1 Click the <b>Add exception</b> button, and enter the address of the HTTPS server you've just
configured, i.e. &mdash;
<verbatim>
https://virtuoso.example.com:4443/
</verbatim>
   1 Click OK, and confirm the exception. 
%BR%%BR%<img src="%ATTACHURLPATH%/Picture_2.png" style="wikiautogen"/>%BR%%BR%
   1 Click to the <b>Your Certificates</b> tab, and import <code>mycert.p12</code>.