<docbook><section><title>ODSPkiSetup</title><title> Set Up Certificate Authority and Issuer</title> Set Up Certificate Authority and Issuer
<para>The following Step-by-Step guide walks you through set up of an X.509 certificate issuer and HTTPS listener, and generation of ODS user certificates.</para>
<bridgehead class="http://www.w3.org/1999/xhtml:h3"> Prerequisites</bridgehead>
<orderedlist spacing="compact"><listitem>Install the <ulink url="https://virtuoso.openlinksw.com/download/">ODS Framework</ulink> and <ulink url="https://virtuoso.openlinksw.com/download/">Virtuoso Conductor</ulink> VAD packages.
<figure><graphic fileref="ODSPkiSetup/Picture01.png" /></figure> </listitem>
<listitem><ulink url="http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSetupSSLVirtuoso">Set Up the Virtuoso HTTPS Listener</ulink> to host the Certificate and Public Key.</listitem>
</orderedlist><emphasis><emphasis>Note:</emphasis> If the DefaultHost setting value in the Virtuoso INI file is changed, the ODS VAD package must be re-installed before the steps below will succeed.</emphasis><bridgehead class="http://www.w3.org/1999/xhtml:h3">Configure ODS Endpoints</bridgehead>
<orderedlist spacing="compact"><listitem>Go to <emphasis>Conductor</emphasis> -&gt; <emphasis>System Admin</emphasis> -&gt; <emphasis>Security</emphasis> -&gt; <emphasis>Public Key Infrastructure</emphasis> -&gt; <emphasis>Configure HTTPS Listeners</emphasis>.
</listitem>
<listitem>Click <emphasis>Configure ODS Endpoints</emphasis> <figure><graphic fileref="ODSPkiSetup/Picture08.png" /></figure> </listitem>
<listitem>Click <emphasis>Create New Endpoint</emphasis> <figure><graphic fileref="ODSPkiSetup/Picture09.png" /></figure> </listitem>
<listitem>Enter the home path for ODS, and save <figure><graphic fileref="ODSPkiSetup/Picture10.png" /></figure> </listitem>
<listitem>The new endpoint should now appear in the endpoint list.
<figure><graphic fileref="ODSPkiSetup/Picture11.png" /></figure> </listitem>
<listitem>Go to the HTTPS site, e.g., <emphasis>https://&lt;cname&gt;:&lt;port&gt;/ods</emphasis>; in our example, <emphasis>https://localhost:4433/ods/</emphasis>.
<orderedlist spacing="compact"><listitem>If Firefox is used, it will complain that the certificate is not valid, so we must register the site&#39;s certificate.
<figure><graphic fileref="ODSPkiSetup/Picture12.png" /></figure> </listitem>
<listitem>In Firefox certificate manager, Site&#39;s certificates add an exception: Firefox Tools -&gt; Options -&gt; View Certificates -&gt; Servers -&gt; Add Exception, <figure><graphic fileref="ODSPkiSetup/Picture13.png" /></figure> </listitem>
<listitem>Confirm exception.
<figure><graphic fileref="ODSPkiSetup/Picture14.png" /></figure> </listitem>
</orderedlist></listitem>
<listitem>Return to ODS site, and register new user.
<figure><graphic fileref="ODSPkiSetup/Picture15.png" /></figure> </listitem>
<listitem><ulink url="ODSGenerateX509Certificate">Generate X.509 Certificate</ulink> </listitem>
<listitem>Log out from ODS and refresh browser to simulate opening the ODS site.
</listitem>
<listitem>Go to <ulink url="https://cname:ssl-port/ods/.">https://cname:ssl-port/ods/.</ulink> The browser will ask for a certificate; select the one generated in the steps above.
<figure><graphic fileref="ODSPkiSetup/Picture21.png" /></figure> </listitem>
<listitem>ODS presents your card, and asks whether to login with certificate.
 Confirm it.
<figure><graphic fileref="ODSPkiSetup/Picture22.png" /></figure> </listitem>
<listitem>You should now be logged in to ODS via <ulink url="WebID">WebID</ulink> Protocol.
<figure><graphic fileref="ODSPkiSetup/Picture23.png" /></figure></listitem>
</orderedlist><para> </para>
<bridgehead class="http://www.w3.org/1999/xhtml:h2">Related</bridgehead>
<itemizedlist mark="bullet" spacing="compact"><listitem><ulink url="VirtODSPubSubHub">Setting up PubSubHub in ODS</ulink> </listitem>
<listitem><ulink url="VirtPubSubHub">PubSubHubBub Demo Client Example</ulink> </listitem>
<listitem><ulink url="VirtFeedPubSubHub">Feed subscription via PubSubHub protocol Example</ulink> </listitem>
<listitem><ulink url="VirtPubSubHubACL">Setting Up PubSubHub to use WebID Protocol or IP based control lists</ulink> </listitem>
<listitem><ulink url="http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSPARQLSSL">Creating and Using a SPARQL-SSL based Endpoint</ulink> </listitem>
<listitem><ulink url="http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtAuthServerUI">Set WebID Protocol ACLs using the Virtuoso Authentication Server UI</ulink> </listitem>
<listitem><ulink url="http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtAuthFOAFSSLACL">WebID Protocol ACLs Tutorial</ulink> </listitem>
<listitem><ulink url="http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtOAuthSPARQL">SPARQL OAuth Tutorial</ulink> </listitem>
<listitem><ulink url="VirtODSFOAFSSL">WebID Protocol Support in OpenLink Data Spaces</ulink> </listitem>
<listitem><ulink url="OdsKeyImport">CA Keys Import using Conductor</ulink> </listitem>
<listitem><ulink url="ODSGenerateX509Certificate">Generate an X.509 Certificate hosted WebID Guide</ulink> </listitem>
<listitem><ulink url="ODSBriefcaseFOAFSSLShareFile">ODS Briefcase WebID Protocol Share File Guide</ulink> </listitem>
<listitem><ulink url="http://esw.w3.org/topic/foaf+ssl">WebID Protocol Specification</ulink> </listitem>
<listitem><ulink url="https://foaf.me/simpleLogin.php">Test WebID Protocol Certificate page</ulink> </listitem>
<listitem><ulink url="http://test.foafssl.org/cert/">WebID Protocol Certificate Generation page</ulink> </listitem>
<listitem><ulink url="https://demo.openlinksw.com/sparql-ssl">Virtuoso Demo SPARQL-SSL Endpoint</ulink></listitem>
</itemizedlist><para> <ulink url="CategoryDocumentation">CategoryDocumentation</ulink> <ulink url="CategorySecurity">CategorySecurity</ulink> <ulink url="CategoryVirtuoso">CategoryVirtuoso</ulink> <ulink url="CategoryFOAF">CategoryFOAF</ulink> <ulink url="CategoryODS">CategoryODS</ulink> </para>
</section></docbook>