If you want to connect to Unimus using HTTPS with a self-signed cert, you can use these instructions.
On
...
Windows
Generate self-signed cert:
Code Block |
---|
set JAVA_HOME=/usr/lib/jvm/java-8-oracle/jre/ KEYTOOL=$JAVA_HOME/bin/keytool cd /opt/unimus $KEYTOOL C:\Program Files\Java\jre1.8.0_141 set KEYTOOL=%JAVA_HOME%\bin\keytool cd "C:\Program Files\Unimus" "%KEYTOOL%" -genkey -alias unimus -storetype PKCS12 -keyalg RSA -keysize 2048 -keystore unimus.keystore.p12 -validity 3650 |
...
After the cert was generated, you will need to configure Unimus to use it.Edit '/etc/default/unimus', and add the following commands
For portable:
Create a file named Unimus.l4j.ini in the same directory as the Unimus executable.
Change Unimus in the above file name to exactly match the name of the Unimus executable.
For installer:
Add the below lines to Unimus.l4j.ini in 'C:\Program Files\Unimus\'.
Inside of this configuration file, please add the following lines:
Code Block |
---|
-Dserver.ssl.key-store=/opt/unimus/unimus.keystore.p12 -Dserver.ssl.keyStoreType=PKCS12 -Dserver.ssl.keyAlias=unimus -Dserver.ssl.key-store-password=[insert password here] |
Please make sure to place each argument into its own line.
Replace '[insert password here]' with the password you used for keystore creation.
Restart the Unimus service, and it should be available only over HTTPS.
On
...
Linux
Generate self-signed cert:
Code Block |
---|
set JAVA_HOME=C:\Program Files\Java\jre1.8.0_141 set KEYTOOL=%JAVA_HOME%\bin\keytool cd "C:\Program Files\Unimus" "%KEYTOOL%" /usr/lib/jvm/java-8-oracle/jre/ KEYTOOL=$JAVA_HOME/bin/keytool cd /opt/unimus $KEYTOOL -genkey -alias unimus -storetype PKCS12 -keyalg RSA -keysize 2048 -keystore unimus.keystore.p12 -validity 3650 |
...
After the cert was generated, you will need to configure Unimus to use it.
Edit 'C:\Program Files\Unimus\Unimus.l4j.ini/etc/default/unimus', and add the following commands, one per line:
Code Block |
---|
-Dserver.ssl.key-store=/opt/unimus/unimus.keystore.p12 -Dserver.ssl.keyStoreType=PKCS12 -Dserver.ssl.keyAlias=unimus -Dserver.ssl.key-store-password=[insert password here] |
...
Restart the Unimus service, and it should be available only over HTTPS.