Network Deployment (Distributed operating systems), v8.0 > Scripting the application serving environment (wsadmin) > Use properties files to manage system configuration > Manage specific configuration objects using properties files > Work with security properties files

Work with SSL configuration properties files

We can use properties files to create, modify, or delete SSL configuration properties.

Determine the changes to make to your SSL configuration object or its properties.

Start the wsadmin scripting tool.

To start wsadmin using the Jython language, run the wsadmin -lang Jython command from the bin directory of the server profile.

Use a properties file, you can create, modify, or delete a SSL configuration object.

Run administrative commands using wsadmin to create or change a properties file for an SSL configuration, validate the properties, and apply them.

Actions for SSL configuration properties files. We can create, modify, and delete SSL configuration properties.

Action	Procedure
create	Set required properties and then run the applyConfigProperties command.
modify	Edit any properties and then run the applyConfigProperties command..
delete	To delete the entire SSLConfig object, uncomment #DELETE=true and then run deleteConfigProperties.
create Property	Not applicable
delete Property	Not applicable

Optionally, you can use interactive mode with the commands:

AdminTask.command_name('-interactive')

Procedure

• Create a properties file for an SSL configuration object.

  1. Set SSLConfig properties as needed.

     Open an editor on an SSLConfig properties file. Modify the Environment Variables section to match the system and set any property value that needs to be changed. An example SSLConfig properties file follows:

     #
     # Header
     #
     ResourceType=SSLConfig
     ImplementingResourceType=Security
     ResourceId=Cell=!{cellName}:Security=:SSLConfig=alias#CellDefaultSSLSettings,managementScope#
     "Cell=!{cellName}:Security=:ManagementScope=scopeName#"(cell):!{cellName}""
     #DELETE=true
     #
     
     #
     #Properties
     #
     managementScope=Cell=!{cellName}:Security=:ManagementScope=scopeName#"(cell):!{cellName}"
     #ObjectName(ManagementScope)
     alias=CellDefaultSSLSettings #required
     type=JSSE #ENUM(SSSL|JSSE),default(JSSE)
     
     #
     EnvironmentVariablesSection
     #Environment Variables
     cellName=myCell
     

  2. Run applyConfigProperties to create or change an SSL configuration object.

     Run the applyConfigProperties command applies the properties file to the configuration. In this Jython example, the optional -reportFileName parameter produces a report named report.txt:

     AdminTask.applyConfigProperties(['-propertiesFileName myObjectType.props -reportFileName report.txt '])
     

• Modify an existing properties file.
  1. Obtain a properties file for the SSL configuration object to change.

     We can extract a properties file for an SSLConfig object using the extractConfigProperties command.

  2. Open the properties file in an editor and change the properties as needed.

     Ensure that the environment variables in the properties file match the system.

  3. Run applyConfigProperties.

• If you no longer need the SSL configuration object, you can delete the entire SSL object.

  To delete the entire object, specify DELETE=true in the header section of the properties file and run deleteConfigProperties; for example:

  AdminTask.deleteConfigProperties('[-propertiesFileName myObjectType.props -reportFileName report.txt]')
  

Results

We can use the properties file to configure and manage the SSL configuration object and its properties.

What to do next

Save the changes to the configuration.
Extract properties files using wsadmin.sh
Create server, cluster, application, or authorization group objects using properties files and wsadmin scripting
Delete server, cluster, application, or authorization group objects using properties files

Related

PropertiesBasedConfiguration command group using wsadmin.sh

+

Search Tips   |   Advanced Search