HTTPS configuration of resin under linux

There is a pit for the official version of resin to connect with openssl; it almost killed me;
note: the resin version only supports the pro version for openssl; the two non-pro versions I downloaded are not available;
implementation steps:
1. Install openssl:
cd /usr/local
yum install openssl openssl-devel -y

2. Generate ssl crt, key file
openssl genrsa -des3 -out test.key 1024
openssl req -new -key test.key -x509 -out test.crt
openssl req -new -key test.key -out test.csr

  Note: You can refer to http://www.linuxidc.com/Linux/2013-08/88271.htm blog
        or http://www.willrey.com/support/ssl_resin.html
2. Unzip your resin package ( Official website: http://caucho.com/products/resin/download/archive)
  
cd /usr/local
  tar -zxvf resin-pro-4.0.49.tar.gz

3. Execute the configuration file configure (execute the directory /usr/local/resin-pro-4.0.49)
 
./configure --prefix=/usr/local/resin-pro-4.0.49 --enable-64bit --enable-ssl --with-openssl=/usr/

Note: The official execution will fail if the prefix=/usr/local/resin-pro-4.0.49 directory is missing;
       if you specify java-home: you can append
--with-java-home=/usr/local/resin-4.0.44/jdk1.7.0_79/

4. Then execute the make command;
cd /usr/local/resin-pro-4.0.49
 make
 make install

5. Modify the configuration file:
  a. Modify the resin.xml file
<http port="443">
  <openssl>
    <certificate-key-file>keys/your_domain.key</certificate-key-file>
    <certificate-file>keys/your_domain.crt</certificate-file>        
    <certificate-chain-file>keys/chain.txt</certificate-chain-file>
    <password>test123</password>
    <protocol>-sslv3</protocol>
  </openssl>
</http>

  b. Or modify resin.perportis (premise: resin.xml file is not modified)
# OpenSSL certificate configuration
# Keys are typically stored in the resin configuration directory.
# openssl_file : keys/test.crt
# openssl_key : keys/test.key
# openssl_password : changeme
# openssl_protocols : -sslv2 -sslv3



Guess you like

Origin http://43.154.161.224:23101/article/api/json?id=326356861&siteId=291194637