TmaxSoft JEUS - SSL

JEUS5 에 SSL 적용. (localhost)

<java설치디렉토리>/bin/keytool 명령어를 사용한다.

1. SSL Keystore 생성

keytool -genkey -alias jeusssl -keyalg RSA -keysize 2048 -validity 1000 -keystore D:\JEUS5.0\config\<노드명>\sslkeystore

2. SSL Truststore 생성

keytool -export -alias jeusssl -keystore D:\JEUS5.0\config\<노드명>\sslkeystore -rfc -file D:\JEUS5.0\config\<노드명>\jeusssl.cer

keytool -import -alias jeussslcert -file D:\JEUS5.0\config\<노드명>\jeusssl.cer -keystore D:\JEUS5.0\config\<노드명>\ssltruststore

3. JEUSMain.xml 설정 - 각 엔진 컨테이너의 <command-option> 노드에 추가.

  ...
  <engine-container>
       <name>container1</name>
       <command-option>-Djeus.ssl.keypass=jeus123 -Djeus.ssl.trustpass=jeus123</command-option>
  ...

4. WEBMAIN.xml 설정 - 각 <context-group> 노드 하위 <webserver-connection> 노드에 <http-listener> 노드 추가.
   

    ...
    <context-group>
        <group-name>PortalGroup</group-name>
        <webserver-connection>
            <http-listener>
                <listener-id>ssl_portal</listener-id>
                <port>18092</port>
                <thread-pool>
                    <min>10</min>
                </thread-pool>
                <scheme>https</scheme>
                <ssl-config>
                    <enable-secure>true</enable-secure>
                    <keystore-file>sslkeystore</keystore-file>
                    <truststore-file>ssltruststore</truststore-file>
                </ssl-config>
            </http-listener>
        </webserver-connection>
    ...