This repository for my tech observations and listing out my key notes
If you want to insatll any ssl in java key store i got a good open source key store software. portecle-1.11 If the tomcat was hanged in the stopping position while you are running tomcat as awindows service below command will help yousc queryex - list all services in windows
sc queryex tomcat8 - list tomcat details find the processid of tomcat
taskkill /PID 2340 /F
https://github.com/ojdkbuild/ojdkbuild
C:\localhostCerts>keytool -genkey -alias server-alias -keyalg RSA -keypass welcome -storepass welcome -keystore localhost.jks
keytool -export -alias server-alias -storepass welcome -file server.cer -keystore localhost.jks
you will get below message
Certificate stored in file <server.cer>
refer:
http://javakafunda.blogspot.com/2012/04/how-to-configure-tomcat-to-support-ssl.html
for javakeytool anf ssl
#https://sites.google.com/site/ddmwsst/create-your-own-certificate-and-ca
Making windows target machine accesble.
winrm set winrm/config/client/auth '@{Basic="true"}'
winrm set winrm/config/service/auth '@{Basic="true"}'
certifictae
openssl pkcs12 -in keystore.p12 -nokeys -out server.crt
key
openssl pkcs12 -in keystore.p12 -nodes -nocerts -out server.key
openssl pkcs12 -export -in server.crt -inkey server.key -out keystore.p12
set lines 256
set trimout on
set tab off
The following commands are needed to create a root certificate:
openssl genrsa -des3 -out rootCA.key 2048
openssl req -x509 -new -nodes -key rootCA.key -sha256 -days 1024 -out rootCA.pem
The following commands are needed to create an SSL certificate issued by the self created root certificate:
openssl req -new -nodes -out server.csr -newkey rsa:2048 -keyout server.key
openssl x509 -req -in server.csr -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -out server.crt -days 500 -sha256 -extfile v3.ext
The referenced v3.ext file should look something like this:
authorityKeyIdentifier=keyid,issuer
basicConstraints=CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
subjectAltName = @alt_names
[alt_names]
DNS.1 = acme-site.dev
DNS.2 = acme-static.dev
In order to bundle the server certificate and private key into a single file the following command needs to be executed:
openssl pkcs12 -inkey server.key -in server.crt -export -out server.pfx
rgb(0, 133, 161)
https://jsonplaceholder.typicode.com/users
curl "https://localhost:8443/uaa/oauth/token" -i -X POST -H "Content-Type: application/x-www-form-urlencoded" -H "Accept: application/json" -d "client_id=admin&client_secret=adminsecret&scope=scim.write&grant_type=client_credentials&token_format=opaque"
Key | value |
---|---|
url | https://localhost:8443/uaa/oauth/token |
Method | Post |
headers | Content-Type:application/x-www-form-urlencoded Accept:application/json |
Request Body | client_id:admin client_secret:adminsecret grant_type:client_credentials |
https://docs.pivotal.io/p-identity/1-10/okta/config-okta.html
Just add the property responseSkew to the WebSSOProfileConsumerImpl and SingleLogoutProfileImpl beans:
<bean id="webSSOprofileConsumer" class="org.springframework.security.saml.websso.WebSSOProfileConsumerImpl">
<property name="responseSkew" value="600"/> <!-- 10 minutes -->
</bean>
<bean id="logoutprofile" class="org.springframework.security.saml.websso.SingleLogoutProfileImpl">
<property name="responseSkew" value="600"/> <!-- 10 minutes -->
</bean>
to share quick video demo and convert to gif https://www.screentogif.com/
Taiko is a free and open source browser automation tool built by the team behind Gauge from ThoughtWorks.
https://github.com/cloudfoundry/uaa-release/blob/develop/jobs/uaa/spec
Check My Repositories HarshaVardhan's GitHub