# OpenSSL Configuration

Resin's SSL support is provided by Sun's JSSE. Because of export restrictions, patents, etc, you'll need to download the JSSE distribution from Sun or get a commercial JSSE implementation.

<li>Download JSSE implementation from Sun (or a JSSE commercial vendor.) <li>Put the JSSE .jar files in resin1.2/lib <li>Create or obtain a SSL certificate. <li>Configure resin.conf <li>Restart Resin

# resin.conf

SSL ports are configured as enhanced HTTP connections. You must:

<li>Load a <var/security provider/> providing the SSL implementation. <li>Enable SSL <li>Specify the keystore type <li>Specify the keystore file (certificate) <li>Specify the keystore password

The easiest keystore type to use is "pkcs12". pkcs12 is a standard format for exchanging certificates. When you export a client certificate from a browser, the usual format is pkcs12.

The default keystore type is "jks", the "Java KeyStore".

<caucho.com> <!-- JSSE security provider --> <security-provider id='com.sun.net.ssl.internal.ssl.Provider'/>

<http-server>

<http port=8443> <ssl>true</ssl> <key-store-type>pkcs12</key-store-type> <key-store-file>keys/server_cert.p12</key-store-file> <key-store-password>changeit</key-store-password> </http>

...

</http-server> </caucho.com>