|
From: Tomas G. <to...@pr...> - 2014-11-03 14:04:30
|
Hi, yes hostname can be changed. Issued TLS certificates needs to be updated/renewed when hostnames change in order to not have browser warnings. Regards, Tomas ********** PrimeKey Solutions AB Anderstorpsvägen 16, 171 54 Solna, Sweden Mob: +46 (0)707421096 Internet: www.primekey.se Twitter: twitter.com/primekeyPKI ********** On 2014-11-03 09:57, Liliana Cabalantti wrote: > Hello, > > I’m working with ejbca_ce_6_0_3 and jboss-as-7.1.1.Final. > > I’m setting up a PKI in a HSM appliance using > httpserver.hostname=localhost. Once the PKI will be operational, the > appliance will be > integrated to a network. I’d like to know if httpserver.hostname can be > modified so that the CAs, RAs already generated are still available. > > Thanks for your help. > > Best regards, > > Liliana Cabalantti > > Bull, Architect of an Open World™ > > BSS/TrustWay > > Tél : +33 1 30 80 63 95 > > Fax : +33 1 30 80 63 40 > > lil...@bu... <mailto:lil...@bu...> > > BULL_logo > > > > ------------------------------------------------------------------------------ > > > > _______________________________________________ > Ejbca-develop mailing list > Ejb...@li... > https://lists.sourceforge.net/lists/listinfo/ejbca-develop > |
|
From: Liliana C. <lil...@bu...> - 2014-11-03 15:13:08
|
Thanks for your response Tomas. Liliana Cabalantti Bull, Architect of an Open WorldT BSS/TrustWay Tél : +33 1 30 80 63 95 Fax : +33 1 30 80 63 40 lil...@bu... -----Message d'origine----- De : Tomas Gustavsson [mailto:to...@pr...] Envoyé : lundi 3 novembre 2014 15:04 À : ejb...@li... Objet : Re: [Ejbca-develop] I need to modify httpserver.hostname after ejbca installation Hi, yes hostname can be changed. Issued TLS certificates needs to be updated/renewed when hostnames change in order to not have browser warnings. Regards, Tomas ********** PrimeKey Solutions AB Anderstorpsvägen 16, 171 54 Solna, Sweden Mob: +46 (0)707421096 Internet: www.primekey.se Twitter: twitter.com/primekeyPKI ********** On 2014-11-03 09:57, Liliana Cabalantti wrote: > Hello, > > I'm working with ejbca_ce_6_0_3 and jboss-as-7.1.1.Final. > > I'm setting up a PKI in a HSM appliance using > httpserver.hostname=localhost. Once the PKI will be operational, the > appliance will be integrated to a network. I'd like to know if > httpserver.hostname can be modified so that the CAs, RAs already > generated are still available. > > Thanks for your help. > > Best regards, > > Liliana Cabalantti > > Bull, Architect of an Open WorldT > > BSS/TrustWay > > Tél : +33 1 30 80 63 95 > > Fax : +33 1 30 80 63 40 > > lil...@bu... <mailto:lil...@bu...> > > BULL_logo > > > > ---------------------------------------------------------------------- > -------- > > > > _______________________________________________ > Ejbca-develop mailing list > Ejb...@li... > https://lists.sourceforge.net/lists/listinfo/ejbca-develop > ------------------------------------------------------------------------------ _______________________________________________ Ejbca-develop mailing list Ejb...@li... https://lists.sourceforge.net/lists/listinfo/ejbca-develop |
|
From: Liliana C. <lil...@bu...> - 2014-12-04 17:25:27
|
Hi, How can I do this ? The server certificate was generated during 'ant install', with default values (CN=localhost,O=EJBCA Sample,C=SE). Today, the appliance is connected to a network and has its own IP address. I tried the following, without success: 1. Change /etc/hostname to newhost 2. Modify /etc/hosts 3. Create a new end entity with CN=newhost. I also tried with the IP address 4. Create a keystore (newhost) 5. cp p12/newhost.jks /opt/jboss/jboss-as-7.1.1.Final/standalone/configuration/keystore/keystore.jks 6. mv p12/newhost.jks tomcat.jks 7. ant web-configure 8. ant deploy-keystore 9. Restart JBoss. Result: JBoss does nor start correctly: JBoss cannot alter mysql 'jboss'@'localhost' user for table 'AccessRulesData' and 'AdminEntityData'. Do you have any ideas ? Thanks in advance, Liliana Cabalantti Bull, Architect of an Open World(tm) BSS/TrustWay Tél : +33 1 30 80 63 95 Fax : +33 1 30 80 63 40 lil...@bu... -----Message d'origine----- De : Tomas Gustavsson [mailto:to...@pr...] Envoyé : lundi 3 novembre 2014 15:04 À : ejb...@li... Objet : Re: [Ejbca-develop] I need to modify httpserver.hostname after ejbca installation Hi, yes hostname can be changed. Issued TLS certificates needs to be updated/renewed when hostnames change in order to not have browser warnings. Regards, Tomas ********** PrimeKey Solutions AB Anderstorpsvägen 16, 171 54 Solna, Sweden Mob: +46 (0)707421096 Internet: www.primekey.se<http://www.primekey.se> Twitter: twitter.com/primekeyPKI ********** On 2014-11-03 09:57, Liliana Cabalantti wrote: > Hello, > > I'm working with ejbca_ce_6_0_3 and jboss-as-7.1.1.Final. > > I'm setting up a PKI in a HSM appliance using > httpserver.hostname=localhost. Once the PKI will be operational, the > appliance will be integrated to a network. I'd like to know if > httpserver.hostname can be modified so that the CAs, RAs already > generated are still available. > > Thanks for your help. > > Best regards, > > Liliana Cabalantti > > Bull, Architect of an Open World(tm) > > BSS/TrustWay > > Tél : +33 1 30 80 63 95 > > Fax : +33 1 30 80 63 40 > > lil...@bu...<mailto:lil...@bu...> <mailto:lil...@bu...> > > BULL_logo > > > > ---------------------------------------------------------------------- > -------- > > > > _______________________________________________ > Ejbca-develop mailing list > Ejb...@li...<mailto:Ejb...@li...> > https://lists.sourceforge.net/lists/listinfo/ejbca-develop > ------------------------------------------------------------------------------ _______________________________________________ Ejbca-develop mailing list Ejb...@li...<mailto:Ejb...@li...> https://lists.sourceforge.net/lists/listinfo/ejbca-develop |