Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 21 Next »

Old title: Create custom certificates for Tomcat installations (non-Docker)

TODO: new content explaining the new dev-/test tooling for WAR and Docker deployments, see also https://confluence.nexusgroup.com/pages/viewpage.action?pageId=211419460

This article is valid for Smart ID Identity Manager 24.R1.

For Tomcat Dev/Test Deployment

Requirements:

  • Tomcat folder containing IDM Operator and IDM Admin of IDM 24.R1 or later on Linux or Windows

  • unpacked bootstrap.zip for the respective IDM release

Instructions:

  1. open a command-line window

  2. change to the unpacked bootstrap folder containing create_sign_encrypt_certs.sh/.bat

  3. execute the respective script for your OS

    1. Linux: ./create_sign_encrypt_certs.sh --targetDir /PATH/TO/TOMCAT/webapps/idm-operator/WEB-INF/classes [OPTIONAL ARGS]

    2. Windows: create_sign_encrypt_certs.bat --targetDir C:\PATH\TO\TOMCAT\webapps\idm-operator\WEB-INF\classes [OPTIONAL ARGS]
      See full usage for optional arguments (if you need the plain text passwords of the generated P12 files, then adding the passwordList argument is recommended):
      create_sign_encrypt_certs.bat / create_sign_encrypt_certs.sh
            --caDir <dir>           CA cert directory - absolute or relative to
                                    bootstrapping directory (default: cacerts)
            --configFile <file>     config to modify - absolute or relative to
                                    target directory (default:
                                    engineSignEncryptConfig.xml)
            --passwordList <file>   optionally create file which lists unscrambled
                                    passwords - absolute or relative to target
                                    directory (will overwrite existing)
            --targetDir <dir>       target directory for certificates - absolute
                                    or relative to current directory

  4. copy all P12 files and engineSignEncryptConfig.xml from idm-operator/WEB-INF/classes to idm-admin/WEB-INF/classes
    (optionally you can prune the files and XML entries which IDM Admin does not need)

For Docker Dev/Test Deployment

xy


Additional information


  • No labels