/
4.2.2.2 Enable One-way SSL On HTTP

4.2.2.2 Enable One-way SSL On HTTP

Owned by Jenni Wallin
Last updated: yesterday at 8:12 am by Chooi San Chong
2 min read

Follow the steps below to enable one-way SSL server authentication for HTTP. Refer to Configuring a Keystore if you would like to create your own Keystore with trusted certificate and private key.

Setting Up with a New Keystore File

Run the mzsh keytool generate command to create a new keystore file contains a new self-signed certificate. The certificate generated by the command will have the alias: Platform.

  1. Run the command to enable TLS on HTTP with a new keystore. This command will create a new keystore file (contains self-signed certificate) in $MZ_HOME/keys and enable TLS on HTTP.

    $ mzsh keytool generate -k <keystore file> --enable-tls http

    Example,

    $ mzsh keytool generate -k $MZ_HOME/keys/container.keys --enable-tls http

  2. Change the URL schema for the platform container.

    $ mzsh topo env --update-mz-platform https://<ip/hostname>:<port>

    Example,

This command will update the URL to platform in $MZ_HOME/bin/mzsh

  1. Restart the platform.

  2. Relogin desktop with HTTPS.

  3. Access MediationZone Web API with HTTPS.

Setting Up with an Existing Keystore File

If you already have a keystore file, place it anywhere on the platform machine. Then, run the mzsh keytool command with the enable-tls option and provide the full path to the keystore file.

  1. Enable the TLS protocol on HTTP with existing keystore.

    The alias must match the alias configured in the Keystore.

    Example,

  2. Change the URL schema for the platform container.

    Example,

This command will update the URL to platform in $MZ_HOME/bin/mzsh

If a trusted certificate has been configured, a FQDN (Fully Qualified Domain Name) must be configured for the URL matching the FQDN of the certificate subject.

  1. Restart the platform.

  2. Relogin desktop with HTTPS.

  3. Access MediationZone Web API with HTTPS.

The  mzsh keytool enable-tls command will configure HTTP TLS properties automatically in Platform container.

The section contains the following subsections:

Next:

4.2.2.3 HTTP TLS Properties