topic OpenSSL to create keystore in Administration and Deployment

OpenSSL to create keystore

japsas100 — Mon, 13 Mar 2017 10:47:38 GMT

How we can generate OpenSSL to create keystore / certificate request?

Re: OpenSSL to create keystore

JuanS_OCS — Mon, 13 Mar 2017 10:57:29 GMT

There is plety of documentation on the internet, but also on support.sas.com. Also, if you are requesting the certificate on an official CA (as Symantec, and such), they provide full instructions in their websites.

http://support.sas.com/documentation/cdl/en/secref/69831/HTML/default/viewer.htm#p0gy97oedcx0fin1n83srxchqpzk.htm

Should give you the hints you need.

Once you get it, you can set it up by following the guides:

http://support.sas.com/documentation/cdl/en/bimtag/69826/HTML/default/viewer.htm#n0nakjyj6hlqmvn11p9p04l25j9n.htm

PS. You can read as well http://docs.oracle.com/javase/7/docs/technotes/tools/solaris/keytool.html

Re: OpenSSL to create keystore

japsas100 — Mon, 13 Mar 2017 12:19:07 GMT

Thanks for quick reply.

I have generted .pem .key .csr file. We alredy configured web server with HTTP pot 80 in linux.

If we want to change it from HTTP to HTTPS then whats steps are required for the same.

Re: OpenSSL to create keystore

Kurt_Bremser — Mon, 13 Mar 2017 12:28:10 GMT

@japsas100 wrote:

Thanks for quick reply.

I have generted .pem .key .csr file. We alredy configured web server with HTTP pot 80 in linux.

If we want to change it from HTTP to HTTPS then whats steps are required for the same.

A google search for "sas convert http to https" immediately returns this result:

Configuring SAS Web Server Manually for HTTPS

Re: OpenSSL to create keystore

JuanS_OCS — Mon, 13 Mar 2017 12:33:03 GMT

Hello @japsas100,

I think I already/earlier pointed you at the document with the procedure.

Once you get it, you can set it up by following the guides:
http://support.sas.com/documentation/cdl/en/bimtag/69826/HTML/default/viewer.htm#n0nakjyj6hlqmvn11p9...

Anyway, @Kurt_Bremser also just pointed you to the same document.

Good luck with the change. Do not forget to add the certificate with the full path to every windows client and java store.