WAS v8.5 > Script the application serving environment (wsadmin) > Use properties files to manage system configuration > Manage specific configuration objects using properties files > Work with security properties files

Work with SSL configuration properties files

We can use properties files to create, modify, or delete SSL configuration properties.

Determine the changes to make to your SSL configuration object or its properties.

Start the wsadmin scripting tool. To start wsadmin using the Jython language, run the wsadmin -lang Jython command from the bin directory of the server profile. Using a properties file, we can create, modify, or delete a SSL configuration object.

Run administrative commands using wsadmin to create or change a properties file for a SSL configuration, validate the properties, and apply them.

Actions for SSL configuration properties files. We can create, modify, and delete SSL configuration properties.

Action	Procedure
create	Set required properties and then run the applyConfigProperties command.
modify	Edit any properties and then run the applyConfigProperties command..
delete	To delete the entire SSLConfig object, uncomment #DELETE=true and then run the deleteConfigProperties command.
create Property	Not applicable
delete Property	Not applicable

Optionally, we can use interactive mode with the commands:

AdminTask.command_name('-interactive')

• Create a properties file for an SSL configuration object.

  1. Set SSLConfig properties as needed.

     Open an editor on an SSLConfig properties file. Modify the Environment Variables section to match the system and set any property value that needs to be changed. An example SSLConfig properties file follows:

     #
     # Header 
     #
     ResourceType=SSLConfig
     ImplementingResourceType=Security
     ResourceId=Cell=!{cellName}:Security=:SSLConfig=alias#CellDefaultSSLSettings,managementScope#
     "Cell=!{cellName}:Security=:ManagementScope=scopeName#"(cell):!{cellName}""
     #DELETE=true
     #
     
     #
     #Properties
     #
     managementScope=Cell=!{cellName}:Security=:ManagementScope=scopeName#"(cell):!{cellName}" 
     #ObjectName(ManagementScope)
     alias=CellDefaultSSLSettings #required
     type=JSSE #ENUM(SSSL|JSSE),default(JSSE)
     
     #
     EnvironmentVariablesSection
     #Environment Variables
     cellName=myCell

  2. Run the applyConfigProperties command to create or change an SSL configuration object.

     Running the applyConfigProperties command applies the properties file to the configuration. In this Jython example, the optional -reportFileName parameter produces a report named report.txt:

     AdminTask.applyConfigProperties(['-propertiesFileName myObjectType.props -reportFileName report.txt '])

• Modify an existing properties file.
  1. Obtain a properties file for the SSL configuration object to change.

     We can extract a properties file for an SSLConfig object using the extractConfigProperties command.

  2. Open the properties file in an editor and change the properties as needed.

     Ensure the environment variables in the properties file match the system.

  3. Run the applyConfigProperties command.

• If you no longer need the SSL configuration object, we can delete the entire SSL object.

  To delete the entire object, specify DELETE=true in the header section of the properties file and run the deleteConfigProperties command; for example:

  AdminTask.deleteConfigProperties('[-propertiesFileName myObjectType.props -reportFileName report.txt]')

Results

We can use the properties file to manage the SSL configuration object and its properties.

Save the changes to your configuration.

Subtopics

• Work with secure socket layer properties files
  We can use properties files to create, modify, or delete secure socket layer properties.

Related

Extracting properties files using wsadmin.sh
Create server, cluster, application, or authorization group objects using properties files and wsadmin scripting
Delete server, cluster, application, or authorization group objects using properties files

Reference:

PropertiesBasedConfiguration command group for AdminTask using wsadmin.sh

+

Search Tips   |   Advanced Search