Generate SSL Certificates for DS and REST API
In this demonstration, I show how to generate custom certificates (with correct hostname/san) for the REST API so that a connection can be made without browser warnings.
I also show the commands required to extract those certificates for re-use with the Design Server.
Tools used during the demonstration (openssl) are freely available for download for multiple platforms.
dtxtomcatservice.bat line edit:
-dname "CN=vm16xhcl, OU=ID, O=HCL, L=Boca Raton, S=FL, C=US" -ext "SAN=dns:vm16xhcl,dns:localhost"
ExtractCertsFromRestApi.bat content:
cd /d %~dp0
set path=C:\HCL\Link_1.1.0\java\bin;%path%
ren server-crt.pem server-crt.pem.backup
ren server-key.pem server-key.pem.backup
keytool -export -alias dtxtomcat -file server-crt.der -keystore C:\HCL\Link_1.1.0\restapi\tomcat\server\dtxtomcat.keystore -storetype PKCS12
openssl x509 -inform der -in server-crt.der -out server-crt.pem
keytool -importkeystore -srckeystore C:\HCL\Link_1.1.0\restapi\tomcat\server\dtxtomcat.keystore -srcstoretype PKCS12 -destkeystore server-key.p12 -deststoretype PKCS12
openssl pkcs12 -in server-key.p12 -nodes -nocerts -out server-key.pem