How to Configure CABI Jaspersoft for HTTPS (SSL)?
I'm unable to locate CATALINA_HOME%\conf\key.bin and would like to create a copy of the file before making changes.
Refer page 53 of TIBCO JasperReportsĀ® Server Security Guide
Release : 21.2, 22.2
Component : Jaspersoft for CA Spectrum
CABI's tomcat can be configured for SSL just as you would configure OneClick's tomcat with a few extra steps
/opt/CA/SharedComponents/CABI/java/bin/keytool -genkey -alias cabissl -keyalg RSA -keysize 2048 -validity 730 -ext "SAN=IP:xxx.xxx.xxx.xxx,DNS:myserver.mydomain.com,DNS:myserver" -keystore /opt/CA/SharedComponents/CABI/keystore/cacerts -storepass changeit
(Where SAN=IP:xxx.xxx.xxx.xxx is the IP address of this server -and- DNS:myserver.mydomain.com is the FQDN of the server)
Import Root signed CA Cert (where <Root>.cer is the Root cert provided by your CA)
/opt/CA/SharedComponents/CABI/java/bin/keytool -importcert -keystore /opt/CA/SharedComponents/CABI/keystore/cacerts -storepass changeit -alias Root -file <Root>.cer
Import Intermediate signed CA Cert (where <Intermediate>.cer is the intermediate cert provided by your CA)
/opt/CA/SharedComponents/CABI/java/bin/keytool -importcert -keystore /opt/CA/SharedComponents/CABI/keystore/cacerts -storepass changeit -alias Intermediate -file <Intermediate>.cer
Import cabissl signed CA Cert
/opt/CA/SharedComponents/CABI/java/bin/keytool -importcert -keystore /opt/CA/SharedComponents/CABI/keystore/cacerts -storepass changeit -alias your_alias -file cabissl.cer
Update: /opt/CA/SharedComponents/CABI/apache-tomcat/conf/server.xml
<Connector port="8443" enableLookups="true" disableUploadTimeout="true" tcpNoDelay="true" protocol="org.apache.coyote.http11.Http11NioProtocol" maxThreads="150" SSLEnabled="true" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" keystoreFile="/opt/CA/SharedComponents/CABI/keystore/cacerts" keystorePass="changeit"/>
You will also need to import tomcatssl cert into the CABI keystore and cabissl cert into OneClick / SRM keystore