Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

If you want to connect to Unimus using HTTPS with a self-signed cert, you can use these instructions.

On

...

Windows

Generate self-signed cert:

Code Block
set JAVA_HOME=/usr/lib/jvm/java-8-oracle/jre/
KEYTOOL=$JAVA_HOME/bin/keytool
 
cd /opt/unimus
$KEYTOOL C:\Program Files\Java\jre1.8.0_141
set KEYTOOL=%JAVA_HOME%\bin\keytool


cd "C:\Program Files\Unimus"
"%KEYTOOL%" -genkey -alias unimus -storetype PKCS12 -keyalg RSA -keysize 2048 -keystore unimus.keystore.p12 -validity 3650

...

After the cert was generated, you will need to configure Unimus to use it.Edit '/etc/default/unimus', and add the following commands

For portable:
Create a file named Unimus.l4j.ini in the same directory as the Unimus executable.
Change Unimus in the above file name to exactly match the name of the Unimus executable.

For installer:
Add the below lines to Unimus.l4j.ini in 'C:\Program Files\Unimus\'.

Inside of this configuration file, please add the following lines:

Code Block
-Dserver.ssl.key-store=/opt/unimus/unimus.keystore.p12
-Dserver.ssl.keyStoreType=PKCS12
-Dserver.ssl.keyAlias=unimus
-Dserver.ssl.key-store-password=[insert password here]

Please make sure to place each argument into its own line.

Replace '[insert password here]' with the password you used for keystore creation.

Restart the Unimus service, and it should be available only over HTTPS.

On

...

Linux

Generate self-signed cert:

Code Block
set JAVA_HOME=C:\Program Files\Java\jre1.8.0_141
set KEYTOOL=%JAVA_HOME%\bin\keytool


cd "C:\Program Files\Unimus"
"%KEYTOOL%" /usr/lib/jvm/java-8-oracle/jre/
KEYTOOL=$JAVA_HOME/bin/keytool
 
cd /opt/unimus
$KEYTOOL -genkey -alias unimus -storetype PKCS12 -keyalg RSA -keysize 2048 -keystore unimus.keystore.p12 -validity 3650

...

After the cert was generated, you will need to configure Unimus to use it.

Edit 'C:\Program Files\Unimus\Unimus.l4j.ini/etc/default/unimus', and add the following commands, one per line:

Code Block
-Dserver.ssl.key-store=/opt/unimus/unimus.keystore.p12 -Dserver.ssl.keyStoreType=PKCS12 -Dserver.ssl.keyAlias=unimus -Dserver.ssl.key-store-password=[insert password here]

...

Restart the Unimus service, and it should be available only over HTTPS.