Securing Web Service and Web Application

Https

We have moved the DoSSiER web service and web application to the https protocol with end to end encryption. This means that it is now necessary to register the appropriate certificates in order to access to the web service and application.

Adding Certificates to Java Keystore

• Download the certificate for the DoSSiER server you are using.

  • In FireFox, this can be done by going to “Preferences,” clicking on “Advanced,” clicking on “Certificates,” and then going to “View Certificates.” Click on the server you are using, such as: “g4devel.fnal.gov:8181.” Once the server you are using is selected, “Export” it.

• Name and save the file somewhere. (In this example it is named: “certFile.crt”)

• Figure out the path for your Java keystore. It will probably be similar to the example of: “jdk.8.0_131/jre/lib/security/cacerts”

• Command line template: “keytool -import -noprompt -trustcacerts -alias <AliasName> -file <Certificate> -keystore <KeystoreFile>”

  • Command line example: “keytool -import -noprompt -trustcacerts -alias g4devel -file certFile.crt -keystore jdk.8.0_131/jre/lib/security/cacerts”

-- HansWenzel - 2017-07-17