Configure Find to Use SSL

By default, Find runs in plain HTTP mode. You can configure it to use SSL communications.

NOTE: If you enable SSL, you cannot use plain HTTP with Find.

To configure Find to use SSL

  • Set the following Java system properties:

    • server.ssl.key-store - The path to a keystore that contains a private key and one or more certificates. The default keystore type is PKCS #12. You can create a PKCS #12 keystore using the Java keytool utility. See Keytool Example Commands.

    • server.ssl.key-store-password - The password for the keystore.

    • server.ssl.key-store-type - (Optional) The type of keystore that you want to use, for example pkcs12.

    • server.ssl.key-password - (Optional) The private key password.

    • server.port - The port to listen on. To use SSL, you must change this value from the default port (that is, you must not use port 8080). Typically you use port 8443, but you can use any valid port value.

    For example:

    java -Dserver.ssl.key-store=/opt/find/my-keystore.p12 -Dserver.ssl.key-store-password=MyPassword -Didol.find.home=[home directory] -Dserver.port=8443 -jar find.war

For more information about setting Java system properties, see Using Java System Properties.

Keytool Example Commands

To generate a new keystore containing a new private key and a self-signed certificate:

keytool -keystore my-keystore.p12 -genkey -keyalg rsa -alias find

To create a certificate signing request (CSR):

keytool -keystore my-keystore.p12 -certreq -alias find -file request.csr

To import the certificate, signed by your chosen CA, overwriting the self-signed certificate that was generated earlier:

keytool -import -keystore my-keystore.p12 -file find-server.crt -alias find

You might also need to import the CA root certificate and any intermediate certificates.