• Topic
  • Discussion
    • VOS.VirtSetupSSLVirtuoso(1.2) -- Owiki? , 2018-04-13 12:07:58 Edit
    [TXT]
    [PLAIN]
    [DOCBOOK]
    owiki 2018-04-13 12:07:58

    Virtuoso Certificate Authority Setup

    The steps that follow guide you through the process of setting up your Virtuoso instance for issuing CA-Authority notarized X.509 certificates that include WebID? watermarks.

    Prerequisites

    The following packages should be installed:

    Generating CA-Authority Certificate ( .p12 or .pfx )

    Manually Generating CA-Authority Certificate

    1. Go to the http://cname:port/conductor URL, enter the DBA user credentials.
    2. Go to System Admin->Security



    3. Enter in the presented form for ex:
      • "Country": US;
      • "State": MA;
      • "Organization": Example Inc. ;
      • "Organization Unit": Example ;
      • "Name": Root CA
      • "e-mail": dba@example.com



    4. Click "Generate".
    5. The CA-Authority Certificate should be successfully generated:



    Importing CA-Authority Certificate

    1. Generate CA-Authority Certificate that:
    2. Go to the http://cname:port/conductor URL, enter the "dba" user credentials.
    3. Go to System Admin->User Accounts



    4. For user "dba" click "Edit":




    5. In the presented form for "PKCS12 file:" click "Choose File" and select your CA Certificate, for ex. with name "example.p12":



    6. Enter "Key Name": id_rsa and "Key Password": the password your CA Certificate has:



    7. Click "Import Key".
    8. On a successful import, the certificate should be presented in the "Cryptographic Keys" list:



    9. Click "Save".
    10. Go to System Admin->Security->Public Key Infrastructure
    11. The CA Certificate Details should be presented:



    Generating SSL Key Using the Conductor UI

    1. Go to the http://cname:port/conductor URL, enter the DBA user credentials.



    2. Go to System Admin->Security
      • Note: Suppose the CA-Authority Certificate is generated / imported already as per the previous sections from above.



    3. Click Configure HTTPS Listeners



    4. Edit the new listener, and click "Generate New" key.



    5. Click Save



    Setting Up Firefox

    1. In the Preferences dialog, open the Advanced tab, and click the "View certificates" button.
    2. Click the "Add exception" button and enter the address of the HTTPS server you've just configured, i.e., https://virtuoso.example.com:4433/
    3. Click OK, and confirm the exception.



    Related