<!doctype HTML public "-//W3C//DTD HTML 4.0 Frameset//EN">

<html xmlns="http://www.w3.org/1999/xhtml">

<!--(==============================================================)-->
<!--(Document created with RoboEditor. )============================-->
<!--(==============================================================)-->

<head>

<title>SSL Certification Tool</title>

<!--(Meta)==========================================================-->

<meta http-equiv=Content-Type content="text/html; charset=utf-8" />
<meta name=generator content="RoboHELP by eHelp Corporation - www.ehelp.com">
<meta name=generator-major-version content=0.1>
<meta name=generator-minor-version content=1>
<meta name=filetype content=kadov>
<meta name=filetype-version content=1>
<meta name=page-count content=1>
<meta name=layout-height content=1860>
<meta name=layout-width content=1060>
<meta name=date content="02 9, 2011 4:58:54 PM">


<!--(Links)=========================================================-->

<link href="../adventnet1.css" rel=stylesheet type="text/css" />



<!--(Style Sheet)===================================================-->

<style>
<!--

p {
	font: normal 14px Helvetica sans-serif;
}

/*=(Generated Code)=================================================*/
/*=(WARNING: DO NOT EDIT OR DELETE THIS SECTION!)===================*/
/*begin!kadov{{=====================================================*/ 
LI.kadov-p {
	font: normal 14px Helvetica sans-serif;
}
/*}}end!kadov=======================================================*/ 



-->
</style>


</head>

<!--(Body)==========================================================-->


<body>

<h1 class=Sub-topic-1>用SSL证书工具委托“SSL认证”：</h1>

<p class=Sub-topic-1>&nbsp;</p>

<p>在ADSelfService Plus中信任“SSL证书”可确保在该产品和其它产品之间进行“安全传输数据”。</p>

<p>&nbsp;</p>

<p>SSL工具通过“加密”处理来保证数据安全。</p>

<p>&nbsp;</p>

<p>本页提供“安装SSL证书指南”及“CSR生成器表单”</p>

<p>&nbsp;</p>

<p class=Sub-topic-1>在 ADSelfService Plus应用中安装SSL证书：</p>

<p class=Sub-topic-1>&nbsp;</p>

<p>在 ADSelfService Plus应用中安装SSL证书需要3步：</p>

<ol>
	
	<li class=kadov-p-CNumbered><p class=Numbered><a href="#SSLCR">SSL 证书请求</a></p></li>
	
	<li class=kadov-p-CNumbered><p class=Numbered><a href="#Keystore">
	生成Keystore文件</a> </p></li>
	
	<li class=kadov-p-CNumbered><p class=Numbered><a href="#Embedding">将SSL证书嵌入到ADSelfService 
	Plus中</a></p></li>
</ol>

<p>&nbsp;</p>

<p class=Sub-topic-1><a name=SSLCR></a>SSL 证书请求：</p>

<p class=Sub-topic-1>&nbsp;</p>

<p>在向认证机构请求证书前，我们需要创建一个tomcat<strong> '.csr' </strong>文件和 一个 '<strong>.keystore</strong>'文件。这两个文件应分别命名为'<strong>selfservice.csr'</strong> 
 &amp; '<strong>selfservice.keystore' </strong>。</p>

<p>&nbsp;</p>

<p class=Sub-topic-1>&nbsp;</p>

<p class=Sub-topic-1>生成 'csr'文件：(利用 'CSI 生成器'表单)</p>

<p class=Sub-topic-1>&nbsp;</p>

<p style="font-weight: bold;">步骤:</p>

<p style="font-weight: bold;">&nbsp;</p>

<ol>
	
	<li class=kadov-p-CNumbered><p class=Numbered>在“通用名称”文本框中，输入访问“服务器”的“域名”（例如： 
	www.example.com） 
 </p></li>
	
	<li class=kadov-p-CNumbered><p class=Numbered>在相应的文本框中指定“机构单位”</p></li>
	
	<li class=kadov-p-CNumbered><p class=Numbered>在“机构”文本框中，输入您的机构依法登记的名称</p></li>
	
	<li class=kadov-p-CNumbered><p class=Numbered>输入您的机构所在的城市 </p></li>
	
	<li class=kadov-p-CNumbered><p class=Numbered>输入您的机构所在的省</p></li>
	
	<li class=kadov-p-CNumbered><p class=Numbered>输入您的机构所在的国家的国家代码 </p></li>
	
	<li class=kadov-p-CNumbered><p class=Numbered>输入安装认证时要填的密码（最少6位）</p></li>
</ol>

<p><strong style="font-weight: bold;">其它功能：</strong></p>

<ol start=8
	style="list-style: decimal;"
	type=1>
	
	<li class=kadov-p-CNumbered><p class=Numbered>在“有效期”文本框中，设置认证的有限期限（默认为90天）</p></li>
	
	<li class=kadov-p-CNumbered><p class=Numbered>公共密钥长度</p></li>
	
	<li class=kadov-p-CNumbered><p class=Numbered>点击“生成CSR”按钮来生成CSR文件。</p></li>
</ol>

<p>&nbsp;</p>

<p class=Sub-topic-1><a name=Keystore></a>生成Keystore文件 (并与CA签名的证书关联）：</p>

<ol>
	
	<li class=kadov-p-CNumbered><p class=Numbered>将CA发送的证书解压缩到&lt;安装目录&gt;\jre\bin</p></li>
	
	<li class=kadov-p-CNumbered><p class=Numbered>按以下步骤生成keystore 并添加签名的证书：</p></li>
</ol>

<p><strong style="font-weight: bold;">生成 'Go Daddy' 认证的keystore：</strong></p>

<p>&nbsp;</p>

<!--(Table)=========================================================-->
<table x-use-null-cells
		style="x-cell-content-align: top; border-spacing: 0;"
		cellspacing=0>
<col style="width: 100%;">

<tr valign=top>
<td style="border-left-width: 1px;
			border-left-color: #000000;
			border-left-style: Solid;
			border-top-style: Solid;
			border-top-color: #000000;
			border-top-width: 1px;
			border-right-width: 1px;
			border-right-color: #000000;
			border-right-style: Solid;
			border-bottom-style: Solid;
			border-bottom-color: #000000;
			border-bottom-width: 1px;
			padding-right: 10px;
			padding-left: 10px;"
	width=100%>
<p>keytool -import -alias root keystore selfservice.keystore -trustcacerts -file 
gd_bundle.crt<br />
keytool -import -alias cross -keystore selfservice.keystore -trustcacerts -file 
gd_cross.crt<br />
keytool -import -alias intermed -keystore selfservice.keystore -trustcacerts 
-file gd_intermed.crt<br />
keytool -import -alias tomcat -keystore selfservice.keystore -trustcacerts -file 
selfservice.crt</td></tr>
</table>

<p>&nbsp;</p>

<p>&nbsp;</p>

<p><strong style="font-weight: bold;">生成 'Verisign' 证书的keystore：
 </strong></p>

<p>&nbsp;</p>

<!--(Table)=========================================================-->
<table x-use-null-cells
		style="x-cell-content-align: top; border-spacing: 0;"
		cellspacing=0>
<col style="width: 100%;">

<tr valign=top>
<td style="border-left-width: 1px;
			border-left-color: #000000;
			border-left-style: Solid;
			border-top-style: Solid;
			border-top-color: #000000;
			border-top-width: 1px;
			border-right-width: 1px;
			border-right-color: #000000;
			border-right-style: Solid;
			border-bottom-style: Solid;
			border-bottom-color: #000000;
			border-bottom-width: 1px;
			padding-right: 10px;
			padding-left: 10px;
			x-cell-content-align: center;"
	valign=middle
	width=100%>
<p>keytool -import -alias intermediateCA -keystore selfservice.keystore -trustcacerts 
-file &lt; your intermediate certificate &gt; .cer<br />
keytool -import -alias tomcat -keystore selfservice.keystore -trustcacerts -file 
selfservice.cer</td></tr>
</table>

<p>&nbsp;</p>

<p>&nbsp;</p>

<p><strong style="font-weight: bold;">生成 'Comodo' 证书的keystore：</strong></p>

<p>&nbsp;</p>

<!--(Table)=========================================================-->
<table x-use-null-cells
		style="x-cell-content-align: top; border-spacing: 0;"
		cellspacing=0>
<col style="width: 100%;">

<tr valign=top>
<td style="border-left-width: 1px;
			border-left-color: #000000;
			border-left-style: Solid;
			border-top-style: Solid;
			border-top-color: #000000;
			border-top-width: 1px;
			border-right-width: 1px;
			border-right-color: #000000;
			border-right-style: Solid;
			border-bottom-style: Solid;
			border-bottom-color: #000000;
			border-bottom-width: 1px;
			padding-right: 10px;
			padding-left: 10px;
			x-cell-content-align: center;"
	valign=middle
	width=100%>
<p>keytool -import -trustcacerts -alias root -file AddTrustExternalCARoot.crt -keystore 
selfservice.keystore<br />
keytool -import -trustcacerts -alias addtrust -file UTNAddTrustServerCA.crt -keystore 
selfservice.keystore<br />
keytool -import -trustcacerts -alias ComodoUTNServer -file ComodoUTNServerCA.crt 
-keystore selfservice.keystore<br />
keytool -import -trustcacerts -alias essentialSSL -file essentialSSLCA.crt -keystore 
selfservice.keystore</td></tr>
</table>

<p>&nbsp;</p>

<p>&nbsp;</p>

<p class=Sub-topic-1><a name=Embedding></a>将SSL证书嵌入到ADSelfService Plus中：</p>

<p>&nbsp;</p>

<ol>
	
	<li class=kadov-p-CNumbered><p class=Numbered>确认产品中启用了SSL端口</p></li>
	
	<li class=kadov-p-CSub-level-Bullet><p class=Sub-level-Bullet>登录&quot;ADSelfService 
	Plus&quot;</p></li>
	
	<li class=kadov-p-CSub-level-Bullet><p class=Sub-level-Bullet>点击管理员 --&gt;&gt;产品设置 
	--&gt;&gt;'连接' </p></li>
	
	<li class=kadov-p-CSub-level-Bullet><p class=Sub-level-Bullet>启用SSL端口</p></li>
	
	<li class=kadov-p-CSub-level-Bullet><p class=Sub-level-Bullet>点击保存，启用SSL端口</p></li>
</ol>

<ol start=2>
	
	<li class=kadov-p-CNumbered><p class=Numbered><!--kadov_tag{{<spaces>}}-->&nbsp;&nbsp;<!--kadov_tag{{</spaces>}}-->从&lt;InstallDir&gt;\jre\bin 
	to &lt;InstallDir&gt;\conf中拷贝SelfService.keystore</p></li>
</ol>

<ol start=3>
	
	<li class=kadov-p-CNumbered><p class=Numbered><!--kadov_tag{{<spaces>}}-->&nbsp;&nbsp;<!--kadov_tag{{</spaces>}}-->编辑 
	&quot;server.xml&quot;(在 &lt;InstallDir&gt;\conf) ，替换以下值：</p></li>
	
	<li class=kadov-p-CSub-level-Bullet><p class=Sub-level-Bullet><!--kadov_tag{{<spaces>}}-->
	&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<!--kadov_tag{{</spaces>}}-->
 	用&quot;./conf/SelfService.keystore&quot;替换&quot;keystoreFile&quot; </p></li>
	
	<li class=kadov-p-CSub-level-Bullet><p class=Sub-level-Bullet><!--kadov_tag{{<spaces>}}-->
	&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<!--kadov_tag{{</spaces>}}-->用您在DSR生成器中输入的密码替换&quot;keystorePass&quot; 
	。保存server.xml</p></li>
</ol>

<ol start=4>
	
	<li class=kadov-p-CNumbered><p class=Numbered><!--kadov_tag{{<spaces>}}-->&nbsp;&nbsp;<!--kadov_tag{{</spaces>}}-->重启 
	ADSelfService Plus</p></li>
</ol>

&nbsp; 

<p>若浏览器没有弹出告警信息，则表示您已成功安装了SSL证书。</p>

<p>&nbsp;</p>

<p>&nbsp;</p>

<!--(Table)=========================================================-->
<table x-use-null-cells
		style="x-cell-content-align: top; border-spacing: 0;"
		cellspacing=0>
<col style="width: 6.459%;">
<col style="width: 93.541%;">

<tr valign=top>
<td style="border-left-width: 1px;
			border-left-color: #000000;
			border-left-style: Solid;
			border-top-style: Solid;
			border-top-color: #000000;
			border-top-width: 1px;
			border-right-width: 1px;
			border-right-color: #000000;
			border-right-style: Solid;
			border-bottom-style: Solid;
			border-bottom-color: #000000;
			border-bottom-width: 1px;
			padding-right: 10px;
			padding-left: 10px;
			x-cell-content-align: center;"
	valign=middle
	width=6.459%>
<p><img src="../images/note.jpg"
		x-maintain-ratio=TRUE
		style="border: none;
				width: 42px;
				height: 42px;
				float: none;"
		width=42
		height=42
		border=0></td>
<td style="border-top-style: Solid;
			border-top-color: #000000;
			border-top-width: 1px;
			border-right-width: 1px;
			border-right-color: #000000;
			border-right-style: Solid;
			border-bottom-style: Solid;
			border-bottom-color: #000000;
			border-bottom-width: 1px;
			padding-right: 10px;
			padding-left: 10px;
			x-cell-content-align: center;"
	valign=middle
	width=93.541%>
<ul>
	
	<li class=kadov-p-CBulletted><p class=Bulletted>您可通过点击“编辑”图标来对已经配置的连接进行编辑。</p></li>
	
	<li class=kadov-p-CBulletted><p class=Bulletted>只有重启 ADSelfService Plus 
	后，对端口号所做的改动才会生效。</p></li>
	
	<li class=kadov-p-CBulletted><p class=Bulletted>
	若您想用“机器名称”而不是“端口地址”来表示“服务器”，则应该将端口号设为 '80'。</p></li>
</ul></td></tr>
</table>

<p class=Bulletted>&nbsp;</p>

<p>&nbsp;</p>

<p>&nbsp;</p>

<div style="font:11px arial; padding:3px; color:#666666;"> <div style="float:left;">

</html>
