How to: Setup SSL for XL Release

This assumes you don't already have a cert. If you do, please skip step 1.

1. Create a private key and cert

   openssl req -newkey rsa:2048 -x509 -keyout xlrKey.pem -out xlrCert.pem -days 3650

2. Create a keystore
3. Create a PKCS12 keystore and convert it to a JKS

   openssl pkcs12 -export -in xlrCert.pem -inkey xlrKey.pem -out xlrKeystore.p12 
      -name jetty

4. Add your cert to the keystore

   keytool -importkeystore -destkeystore xlrKeystore.jks -deststorepass password
     -srckeystore
   xlrKeystore.p12 -srcstoretype PKCS12 -srcstorepass password

5. Edit conf to use the keystore - add .jks file to XLR_HOME/conf
6. Add the following to your XLR_HOME/conf/xl-release-server.conf
   

   ssl=true #set this to true
   keystore.password=password
   keystore.path=/Users/psimon/Desktop/sslXLR/xlrKeystore.jks
   keystore.keypassword=password
   server.url=https\://<release server dns>