content
| - ---+ Guide for Setting Up the Virtuoso HTTPS Listener using File System to host Certificate and Public Key
To enable the HTTPS listener, you will need a certificate. Existing certificates may not
have Subject Alternate Name, so you may want to acquire (or [[VirtGenerateX509Cert][generate]]) a new one.
1 Move <code>newcert.pem</code>, <code>newkey.pem</code>, and <code>cacert.pem</code>
into the server's working directory. In our test case, we put the keys in a '<code>keys</code>'
sub-directory, and added the following lines to the <code>[HTTPServer]</code> section of the Virtuoso
INI file (default, <code>virtuoso.ini</code>):
<verbatim>
SSLPort = 4443
SSLCertificate = ./keys/newcert.pem
SSLPrivateKey = ./keys/newkey.pem
X509ClientVerifyCAFile = ./keys/cacert.pem
X509ClientVerify = 1
X509ClientVerifyDepth = 15
</verbatim>
1 Also in the Virtuoso INI file, in the <code>[URIQA]</code> section, <code><nowiki>DefaultHost</nowiki></code>
(set to <code>localhost:8890</code> below) must be edited to correspond to the DNS-resolvable host name
("CNAME") of the Virtuoso host, combined with the <code><nowiki>ServerPort</nowiki></code> as set in the
<code>[HTTPServer]</code> section of the same INI file. Default settings are seen here:
<verbatim>
[URIQA]
DynamicLocal = 1
DefaultHost = localhost:8890
</verbatim>
For instance, if the CNAME of the host is <code>virtuoso.example.com</code>, and the
<code><nowiki>ServerPort</nowiki></code> is <code>4321</code>, the <code><nowiki>DefaultHost</nowiki></code> should be set to
<code>virtuoso.example.com:4321</code>
<verbatim>
[URIQA]
DynamicLocal = 1
DefaultHost = virtuoso.example.com:4321
</verbatim>
1 Start the Virtuoso server, and look at the log file. Once HTTPS is up, you should see
something like —
<verbatim>
HTTPS Using X509 Client CA ....
HTTPS/X509 server online at 4443
</verbatim>
---++ Setting Up Firefox
1 In the <b>Preferences</b> dialog, open the <b>Advanced</b> tab, and the <b>Encryption</b>
subtab; then, click the <b>View certificates</b> button.
%BR%%BR%<img src="%ATTACHURLPATH%/Picture_1.png" style="wikiautogen"/>%BR%%BR%
1 Click the <b>Add exception</b> button, and enter the address of the HTTPS server you've just
configured, i.e. —
<verbatim>
https://virtuoso.example.com:4443/
</verbatim>
1 Click OK, and confirm the exception.
%BR%%BR%<img src="%ATTACHURLPATH%/Picture_2.png" style="wikiautogen"/>%BR%%BR%
1 Click to the <b>Your Certificates</b> tab, and import <code>mycert.p12</code>.
|