<title>OpenSSL Configuration</title>

Resin's SSL support is provided by Sun's
<a href='http://java.sun.com/products/jsse'>JSSE</a>.  Because of
export restrictions, patents, etc, you'll need to download the JSSE
distribution from Sun or get a commercial JSSE implementation.

<ol>
<li>Download JSSE implementation from Sun (or a JSSE commercial
vendor.)
<li>Put the JSSE .jar files in resin1.2/lib
<li>Create or obtain a SSL certificate.
<li>Configure resin.conf
<li>Restart Resin
</ol>

<section title="resin.conf">

SSL ports are configured as enhanced HTTP connections.  You must:
<ol>
<li>Load a <var/security provider/> providing the SSL implementation.
<li>Enable SSL
<li>Specify the keystore type
<li>Specify the keystore file (certificate)
<li>Specify the keystore password
</ol>

<p/>The easiest keystore type to use is "pkcs12".  pkcs12 is a
standard format for exchanging certificates.  When you export a client
certificate from a browser, the usual format is pkcs12.

<p/>The default keystore type is "jks", the "Java KeyStore".

<example>
&lt;caucho.com>
  &lt;!-- JSSE security provider -->
  &lt;security-provider id='com.sun.net.ssl.internal.ssl.Provider'/>

  &lt;http-server>

    &lt;http port=8443>
     &lt;ssl>true&lt;/ssl>
     &lt;key-store-type>pkcs12&lt;/key-store-type>
     &lt;key-store-file>keys/server_cert.p12&lt;/key-store-file>
     &lt;key-store-password>changeit&lt;/key-store-password>
    &lt;/http>

    ...

  &lt;/http-server>
&lt;/caucho.com>
</example>


</section>

