Home / server / Questions / 272314
In Process
Adam
Asked: 2011-05-22 16:02:16 +0800 CST

Install and configure SSL with TeamCity using cert generated from a global CA

  • 772

UPDATE:

Updated to be more specific with what I'm dealing with.

I thought I was on the right path before, but now things just feel more obscure.

I have no experience with Apache/Tomcat/Whatever TeamCity is running under, pretty much only worked in IIS before, and I am having a hard time understanding how to install a SSL certificate to use TeamCity with https.

I have an SSL Cert from a global CA but I am having a hard time with the instructions here and here.

I imported my cert into a keystore and I configured my server.xml file to point at my keystore following the directions. However, when I go to my site it says there is a problem with my certificate. It seems like the instructions from the CA, the instructions from TeamCity, and the instructions from Apache (which team city links to) are all different.

Can anyone help explain the steps I'm missing/skipping?

Note, this is running on a Windows box if that makes a difference.

tomcat apache-2.2 ssl teamcity

2 Answers

  1. To install the certificate on apache2 you'll need to edit either your httpd.conf or SSL.conf file to contain three entries:

    SSLEngine on
    SSLCertificateFile /path/to/your/apacheconf/ssl.crt/server.crt
    SSLCertificateKeyFile /path/to/your/apacheconf/ssl.key/server.key

    You may need to check that you've installed OpenSSL and mod_ssl.so.

    • 0

  2. Good morning.

    Based on your info and the comments, it runs over a modified Tomcat. It must be easy for you modify the file "server.xml" and locate the parameters needed for SSL Certificate.

    Read this document as a base Tomcat SSL (full). The section "Edit the Tomcat Configuration File" will explain you how to modify the file to use .key and .crt files.

    Maybe, if your certificate is in PEM or PFX format you need to use OpenSSL (refer to Convert Certificates for the more common commands) to transform it in the format needed by Tomcat.

    Good luck

    Note: Maybe there's more than a server.xml file, you must modify the one that configures de server, not the one that configures the application that runs over.

    • 0