Create SSL certificates from the command prompt

We can use the securityUtility command to create a default SSL certificate for use by the Liberty profile configuration.

1. Open a command prompt, then change directory to the wlp/bin directory.

2. Create an SSL certificate. securityUtility command.
   securityUtility createSSLCertificate --server=server_name --password=your_password

Results

We have created a default keystore key.jks for the specified server. The keystore file is located under the /resources/security directory of the specified server. If a default keystore already exists, the command does not execute successfully.

What to do next

We can configure the server to use the keystore and enable the SSL in the server configuration by adding the following lines to the server configuration file:

    <featureManager>
        <feature>ssl-1.0</feature>
    </featureManager>

    <keyStore id="defaultKeyStore" password="keystore_password" /> 

See Enable SSL communication .

Subtopics

• securityUtility command
  The securityUtility command supports plain text encryption and SSL certificate creation for a Liberty profile.

Parent topic: Secure communications with the Liberty profile

Reference:

securityUtility command