This document describes the HTTPS/SSL support for the WebSocket Server Tasks.
The SSL support is implemented using the Java Secure Socket Extension (JSSE), provided as standard with Java. JSSE supports:
To initiate HTTPS/SSL a keystore file must be used. Two different kind of keystores are supported:
To generate a Java keystore, the keytool command provided with Java must be used. We will not describe keytool in general here but, an example how keytool can be used to generate a JKS keystore file:
This will generate a Java keystore file: keystore.jks. To use this specify the following parameters in WebSocketServerInitTask:
SSL Keystore Path: | /path/to/keystore.jks |
---|---|
SSL Keystore Type: | JKS |
SSL Keystore Password: | kspassword |
SSL Key Password: | password |
To generate a PKCS #12 keystore file OpenSSL may be used. We will not describe OpenSSL in general here, but an example how OpenSSL can be used to generate a PKCS #12 keystore file:
This will generate several files and finally a PKCS #12 keystore file: server.p12. To use this specify the following parameters in WebSocketServerInitTask:
SSL Keystore Path: | /path/to/server.p12 |
---|---|
SSL Keystore Type: | PKCS12 |
SSL Keystore Password: | serverpass |
SSL Key Password: | serverpass |