Setting commandline properties for SSL communication with CAS

Update utilities for SSL communication with CAS

  1. Open %ENDECA_CAS_ROOT%/../workspace/conf/commandline.properties for editing.

  2. Specify a fully qualified hostname, an SSL port (must be 8505), and an SSL flag value (must be true): 

     com.endeca.itl.cas.server.host=busgg2007.us.example.com
	com.endeca.itl.cas.server.port=8505
	# If set to true, the CAS Server port is interpreted as
	# the SSL port. If using redirects from the non-SSL port
	# to the SSL port this should be false.
	com.endeca.itl.cas.server.isPortSsl=true

To update utilities for SSL communication with CAS, follow these steps:

  1. Open the following files in %ENDECA_CAS_ROOT%/bin/ for editing:

  2. In each of the files listed in the preceding step, uncomment lines in the following code to enable either plain text passphrases or credential store OCS passphrases: 

     REM Set the JVM default trust store and key store locations.
	SET JVM_ARGS=-Djavax.net.ssl.trustStore="C:\Endeca\ToolsAndFrameworks\11.1.0\deployment_template~
  \ssl_certs_utility\bin\ssl\TS-slcw5dd.us.oracle.com.ks" %JVM_ARGS%
	SET JVM_ARGS=-Djavax.net.ssl.trustStoreType=JKS %JVM_ARGS%
	REM SET JVM_ARGS=-Djavax.net.ssl.trustStorePassword=eacpass %JVM_ARGS%
	SET JVM_ARGS=-Djavax.net.ssl.keyStore="C:\Endeca\ToolsAndFrameworks\11.1.0\deployment_template~
  \ssl_certs_utility\bin\ssl\slcw5dd.us.example.com.ks" %JVM_ARGS%
	SET JVM_ARGS=-Djavax.net.ssl.keyStoreType=JKS %JVM_ARGS%
	REM SET JVM_ARGS=-Djavax.net.ssl.keyStorePassword=eacpass %JVM_ARGS%
	SET JVM_ARGS=-Dcom.endeca.itl.credstore.keyStoreKeyName=keystorekey %JVM_ARGS%
	SET JVM_ARGS=-Dcom.endeca.itl.credstore.trustStoreKeyName=truststorekey %JVM_ARGS%
	SET JVM_ARGS=-Doracle.security.jps.config=C:\Endeca\ToolsAndFrameworks\11.1.0~
  \credential_store\conf\jps-config.xml %JVM_ARGS%
	SET JVM_ARGS=-Dcom.endeca.itl.credstore.mapName=oracleCommerceSSLPassPhrase %JVM_ARGS%

Copyright © Legal Notices