<?xml-stylesheet type="text/xsl" href="https://uat.community.rws.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>SDL Web 8 - Securing Micro-Services with SSL and a CA certificate</title><link>/product-groups/tridion/tridion-sites/b/techweblog/posts/sdl-web-8-securing-micro-services-with-ssl-and-a-ca-certificate</link><description>In this document we will explain how to create a custom keystore and import the CA certificate and matching key pair allowing SSL support on Tomcat Embedded as used on SDL Micro-services. 
The Keystore steps are general and may be used for any CA Certificate</description><dc:language>en-US</dc:language><generator>Telligent Community 12 Non-Production</generator><item><title>RE: SDL Web 8 - Securing Micro-Services with SSL and a CA certificate</title><link>https://uat.community.rws.com/product-groups/tridion/tridion-sites/b/techweblog/posts/sdl-web-8-securing-micro-services-with-ssl-and-a-ca-certificate</link><pubDate>Fri, 09 Jun 2017 19:09:36 GMT</pubDate><guid isPermaLink="false">10acfa76-f078-475b-a7ef-fc5b3e8d2934:5c47bd9d-8d4d-456f-9ec5-2edc6008d378</guid><dc:creator>Paul Brou</dc:creator><slash:comments>0</slash:comments><description>&lt;p&gt;Great stuff Paul!&lt;/p&gt;
&lt;img src="https://uat.community.rws.com/aggbug?PostID=6825&amp;AppID=95&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"&gt;</description></item><item><title>RE: SDL Web 8 - Securing Micro-Services with SSL and a CA certificate</title><link>https://uat.community.rws.com/product-groups/tridion/tridion-sites/b/techweblog/posts/sdl-web-8-securing-micro-services-with-ssl-and-a-ca-certificate</link><pubDate>Tue, 23 May 2017 07:20:54 GMT</pubDate><guid isPermaLink="false">10acfa76-f078-475b-a7ef-fc5b3e8d2934:5c47bd9d-8d4d-456f-9ec5-2edc6008d378</guid><dc:creator>Hao Peng</dc:creator><slash:comments>0</slash:comments><description>&lt;p&gt;Nice guide Paul. Thank you&lt;/p&gt;
&lt;img src="https://uat.community.rws.com/aggbug?PostID=6825&amp;AppID=95&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"&gt;</description></item><item><title>RE: SDL Web 8 - Securing Micro-Services with SSL and a CA certificate</title><link>https://uat.community.rws.com/product-groups/tridion/tridion-sites/b/techweblog/posts/sdl-web-8-securing-micro-services-with-ssl-and-a-ca-certificate</link><pubDate>Mon, 08 May 2017 18:47:49 GMT</pubDate><guid isPermaLink="false">10acfa76-f078-475b-a7ef-fc5b3e8d2934:5c47bd9d-8d4d-456f-9ec5-2edc6008d378</guid><dc:creator>Jan Horsman</dc:creator><slash:comments>0</slash:comments><description>&lt;p&gt;thanks!&lt;/p&gt;
&lt;img src="https://uat.community.rws.com/aggbug?PostID=6825&amp;AppID=95&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"&gt;</description></item><item><title>RE: SDL Web 8 - Securing Micro-Services with SSL and a CA certificate</title><link>https://uat.community.rws.com/product-groups/tridion/tridion-sites/b/techweblog/posts/sdl-web-8-securing-micro-services-with-ssl-and-a-ca-certificate</link><pubDate>Thu, 04 May 2017 10:48:21 GMT</pubDate><guid isPermaLink="false">10acfa76-f078-475b-a7ef-fc5b3e8d2934:5c47bd9d-8d4d-456f-9ec5-2edc6008d378</guid><dc:creator>Paul Dessart</dc:creator><slash:comments>0</slash:comments><description>&lt;p&gt;Dear Jan,&lt;/p&gt;
&lt;p&gt;Thanks for your comment.&lt;/p&gt;
&lt;p&gt;While testing with R&amp;amp;D to validate this issue, we came against the fact that application.yml doesn&amp;#39;t seem to work when using a PKCS12 keystore. &amp;nbsp;It works well with the self-signed certificate. &lt;/p&gt;
&lt;p&gt;The major issue I saw from the beginning was indeed an issue on how to import the private key and the CA certificate in once in the keystore. &lt;/p&gt;
&lt;p&gt;For this I had to do some research and as customers were reporting the issue, I believe it was worth an article.&lt;/p&gt;
&lt;p&gt;Anyway, we are working to update the documentation too so this will be available on docs soon too. &lt;/p&gt;
&lt;img src="https://uat.community.rws.com/aggbug?PostID=6825&amp;AppID=95&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"&gt;</description></item><item><title>RE: SDL Web 8 - Securing Micro-Services with SSL and a CA certificate</title><link>https://uat.community.rws.com/product-groups/tridion/tridion-sites/b/techweblog/posts/sdl-web-8-securing-micro-services-with-ssl-and-a-ca-certificate</link><pubDate>Thu, 04 May 2017 10:23:54 GMT</pubDate><guid isPermaLink="false">10acfa76-f078-475b-a7ef-fc5b3e8d2934:5c47bd9d-8d4d-456f-9ec5-2edc6008d378</guid><dc:creator>Jan Horsman</dc:creator><slash:comments>0</slash:comments><description>&lt;p&gt;Congrats with your first community artice, Paul!&lt;/p&gt;
&lt;p&gt;What the difference between the procedure you describe and what is documented in the SDL documentation? Your article is about CA authority signed while the procedure in the docs is self-signed. But there also are differences like .property vs .yaml configuration, and how the certificate is stored?&lt;/p&gt;
&lt;img src="https://uat.community.rws.com/aggbug?PostID=6825&amp;AppID=95&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"&gt;</description></item><item><title>RE: SDL Web 8 - Securing Micro-Services with SSL and a CA certificate</title><link>https://uat.community.rws.com/product-groups/tridion/tridion-sites/b/techweblog/posts/sdl-web-8-securing-micro-services-with-ssl-and-a-ca-certificate</link><pubDate>Tue, 02 May 2017 09:34:28 GMT</pubDate><guid isPermaLink="false">10acfa76-f078-475b-a7ef-fc5b3e8d2934:5c47bd9d-8d4d-456f-9ec5-2edc6008d378</guid><dc:creator>Alvin Reyes</dc:creator><slash:comments>0</slash:comments><description>&lt;p&gt;Nice, thanks for sharing, Paul! This makes setting up SSL much more tangible, especially if&amp;nbsp;it&amp;#39;s a &amp;quot;new&amp;quot; topic. And it&amp;#39;s great seeing more &amp;quot;how to&amp;quot; guides in the community (again).&lt;/p&gt;&lt;img src="https://uat.community.rws.com/aggbug?PostID=6825&amp;AppID=95&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"&gt;</description></item></channel></rss>