Virtuoso Open-Source Edition: Setting-Up issuer CA

Virtuoso Open-Source, OpenLink Data Spaces, and OpenLink Ajax Toolkit

Setting-Up issuer CA

The following Step-by-Step guide walks you through set up of an X.509 certificate issuer and HTTPS listener, and generation of ODS user certificates.

  1. Install ODS and Conductor manager VAD packages.



  2. Go to the http://cname:port/conductor URL, enter the DBA user credentials.



  3. Go to System Admin->Security



  4. Enter the Issuer details and click Generate.



  5. Click Configure HTTPS Listeners



  6. Edit the new listener, and click "Generate New" key.



  7. Click Save



  8. Click Confgure ODS Endpoints



  9. Click "Create New Endpoint"



  10. Enter the home path for ODS, and save



  11. The new endpoint should now appear in the endpoint list.



  12. Go to the HTTPS site, e.g., https://cname:port/ods; in our example, https://localhost:4433/ods/. If Firefox is used, it will complain that the certificate is not valid, so we must register the site's certificate.



  13. In Firefox certificate manager, Site's certificates add an exception: Firefox Tools -> Options -> View Certificates -> Servers -> Add Exception,



  14. Confirm exception.



  15. Return to ODS site, and register new user.



  16. Edit the user's profile and enter his/her name(s). If this step is skipped, the certificate will not have a human readable name.



  17. Open the Security tab in the Profile Editor, and generate the client key.



  18. If all is set up correctly, you should see this message. It means Firefox has the private key, and has obtained a new certificate from the server.



  19. Refresh the Security tab by clicking on same tab.



  20. Select automatic login option, and save.



  21. Log out from ODS and refresh browser to simulate opening the ODS site. The browser will ask for a certificate; select the one generated in the steps above.



  22. ODS presents your card, and asks to login with certificate. Confirm it.



  23. You should now be logged in to ODS via FOAF+SSL.



Note: If you change the DefaultHost setting value in the virtuoso ini, in order the steps from above to work, you need to pre-install the ODS package.

References

Powered By Virtuoso