View Attach Info

Add new attachment

Only authorized users are allowed to upload new attachments.

This page (revision-19) was last changed on 13-Jun-2022 03:22 by Ben Spink

This page was created on 29-Dec-2020 05:25 by Ben Spink

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Difference between version and

At line 1 changed 3 lines
Here is an example on how to make a java keystore for SSL in CrushFTP.
*Apache - If you already have a certificate for Apache, you may be able to convert it to a Java keystore and use it with CrushFTP. I provide this information untested, but it in theory looks like it would work. [http://www.ks.uiuc.edu/Research/biocore/localServer/install/installCert.shtml] or [http://portecle.sourceforge.net/]
!__Starting from the beginning :__
\\
\\
![Use Portecle's GUI to make a Keystore|Portecle] <---click here
\\
\\
\\
\\
\\
----
!__Renewing a certificate :__
\\
\\
![Use Portecle's GUI to make a Keystore|Portecle] <---click here
\\
\\
\\
\\
\\
----
Alternate methods for bringing in a cert from another server:
----
*Apache - If you already have a certificate for Apache, follow these [instructions|openssl_key_convert] for converting it.
----
At line 5 removed 3 lines
*Java - I purchased a cheap chained certificate from GoDaddy. I chose the "Tomcat" type of certificate as CrushFTP works the same way as tomcat does for certificates. I substituted "crushftp" instead of "tomcat" though. It really doesn't matter however.
*Easier GUI Method : [Portecle]
At line 27 added 12 lines
*OS X Server - Export the private key using keychain. You will need to run keychain using root access to be able to export the certificate.
{{{
sudo "/Applications/Utilities/Keychain Access.app/Contents/MacOS/Keychain Access"
}}}
Then use Portecle to add in the missing certificate that go along with the chain to trust the private key's signature. For GoDaddy, that means downloading the valicert, cross and intermediate cert.
----
These below instructions are complicated and shouldn't be used unless you just can't stand using Portecle for some strange reason.
*Java - When purchasing a certificate from a cert authority, be sure to choose 'Tomcat' for the format.
At line 15 changed one line
keytool -genkey -keysize 2048 -alias crushftp -keyalg RSA -keystore crushftp.keystore
keytool -genkey -keysize 2048 -alias crushftp -keyalg RSA -keystore crushftp.jks
At line 47 added 5 lines
or with Elliptic Curve method:\\
{{{
keytool -genkey -keysize 2048 -alias crushftp -keyalg EC -sigalg SHA384withECDSA -keystore crushftp.jks
}}}
At line 53 changed 3 lines
keytool -certreq -keyalg RSA -alias crushftp -file crushftp.csr -keystore crushftp.keystore
Enter keystore password:
keytool -certreq -keyalg RSA -alias crushftp -file crushftp.csr -keystore crushftp.jks
At line 57 changed one line
Enter your password you used from above.
or with elliptic curve method:\\
{{{
keytool -certreq -keyalg EC -sigalg SHA384withECDSA -alias crushftp -file crushftp.csr -keystore crushftp.jks
}}}
Enter your password you used from above for the keystore.
At line 63 changed one line
WARNING! Keep your "crushftp.keystore" file! (Make a backup of it just in case you make a mistake in step 3.) You must have this original keystore file to apply the signed certificate GoDaddy gives back.
WARNING! Keep your "crushftp.jks" file! (Make a backup of it just in case you make a mistake in step 3.) You must have this original keystore file to apply the signed certificate GoDaddy gives back.
At line 76 changed one line
[https://certificates.starfieldtech.com/Repository.go]
[https://certs.godaddy.com/anonymous/repository.seam]
At line 86 changed one line
keytool -import -alias root -keystore crushftp.keystore -trustcacerts -file valicert_class2_root.crt
keytool -import -alias root -keystore crushftp.jks -trustcacerts -file valicert_class2_root.crt
At line 89 changed one line
keytool -import -alias cross -keystore crushftp.keystore -trustcacerts -file gd_cross_intermediate.crt
keytool -import -alias cross -keystore crushftp.jks -trustcacerts -file gd_cross_intermediate.crt
At line 92 changed one line
keytool -import -alias intermed -keystore crushftp.keystore -trustcacerts -file gd_intermediate.crt ]
keytool -import -alias intermed -keystore crushftp.jks -trustcacerts -file gd_intermediate.crt ]
At line 98 changed one line
keytool -import -alias crushftp -keyalg RSA -keystore crushftp.keystore -trustcacerts -file www.crushftp.com.crt
keytool -import -alias crushftp -keyalg RSA -keystore crushftp.jks -trustcacerts -file www.crushftp.com.crt
Version Date Modified Size Author Changes ... Change note
19 13-Jun-2022 03:22 6.064 kB Ben Spink to previous
18 29-Dec-2020 05:25 5.769 kB Ben Spink to previous | to last SSL ==> SSL_CLI
17 29-Dec-2020 05:25 5.769 kB Ben Spink to previous | to last
16 29-Dec-2020 05:25 5.637 kB Ben Spink to previous | to last
15 29-Dec-2020 05:25 5.4 kB Ben Spink to previous | to last
14 29-Dec-2020 05:25 5.401 kB Ben Spink to previous | to last
13 29-Dec-2020 05:25 5.406 kB Ben Spink to previous | to last
12 29-Dec-2020 05:25 5.436 kB Ben Spink to previous | to last
11 29-Dec-2020 05:25 5.525 kB Ben Spink to previous | to last
10 29-Dec-2020 05:25 5.398 kB Ben Spink to previous | to last
9 29-Dec-2020 05:25 5.36 kB Ben Spink to previous | to last
8 29-Dec-2020 05:25 5.356 kB Ben Spink to previous | to last
7 29-Dec-2020 05:25 5.35 kB Ben Spink to previous | to last
6 29-Dec-2020 05:25 5.3 kB Ben Spink to previous | to last
5 29-Dec-2020 05:25 5.262 kB Ben Spink to previous | to last
4 29-Dec-2020 05:25 5.197 kB Ben Spink to previous | to last
3 29-Dec-2020 05:25 5.027 kB Ben Spink to previous | to last
2 29-Dec-2020 05:25 4.954 kB Ben Spink to previous | to last
1 29-Dec-2020 05:25 6.147 kB Ben Spink to last
« This page (revision-19) was last changed on 13-Jun-2022 03:22 by Ben Spink
G’day (anonymous guest)
CrushFTP10 | What's New

Referenced by
SSL

JSPWiki