%META:TOPICPARENT{name="ODSGenerateWebIDX509CertBrsKeystore"}%

---+Generate an X.509 Certificate (with a WebID watermark) to be managed by the Opera browser-based keystore

---++ Prerequisites
   1. [[ODSSetupSSL][Set up an X.509 certificate issuer and HTTPS listener]].
   1. [[ODSX509GenerateIESetService][Set up an X.509 Certificate Service]].

---++ Certificate Generation Process

These steps will work against any ODS instance where you have the requisite privileges.

   1. Go to the ODS home page (local or remote) and log in as an existing ODS user (register ODS user if you don't have such):
%BR%%BR%<a href="%ATTACHURLPATH%/o1.png" target="_blank"><img src="%ATTACHURLPATH%/o1.png" width="600px" /></a>%BR%%BR%
   1 After log in, you will have an ODS-generated Person Entity Identifier (an HTTP URI that Identifies "You") of the form: <code><nowiki>http://cname/dataspace/person/user-name#this</nowiki></code>
%BR%%BR%<a href="%ATTACHURLPATH%/o1a.png" target="_blank"><img src="%ATTACHURLPATH%/o1a.png" width="600px" /></a>%BR%%BR%
   1 Fill out your profile, if still in default state: <i>(<b>Note:</b> If this step is skipped, the resulting X.509 certificate may not have a human-readable name.)</i>
%BR%%BR%<a href="%ATTACHURLPATH%/o2.png" target="_blank"><img src="%ATTACHURLPATH%/o2.png" width="600px" /></a>%BR%%BR%
   1 Go to <b>Security</b>:
%BR%%BR%<a href="%ATTACHURLPATH%/o3.png" target="_blank"><img src="%ATTACHURLPATH%/o3.png" width="600px" /></a>%BR%%BR%
   1 Go to <b>Certificate Generator</b>:
%BR%%BR%<a href="%ATTACHURLPATH%/o4.png" target="_blank"><img src="%ATTACHURLPATH%/o4.png" width="600px" /></a>%BR%%BR%
   1 Fill out the form, for example:
      * <b>Country:</b> <code>UK</code>;
      * <b>Organization:</b> <code>OL</code>;
      * <b>Valid for:</b> <code>90 hours</code>:
%BR%%BR%<a href="%ATTACHURLPATH%/o5.png" target="_blank"><img src="%ATTACHURLPATH%/o5.png" width="600px" /></a>%BR%%BR%
   1 Click <b>Submit certificate request.</b>
   1 Opera should show prompt to install the certificate:
%BR%%BR%<a href="%ATTACHURLPATH%/o6.png" target="_blank"><img src="%ATTACHURLPATH%/o6.png" width="600px" /></a>%BR%%BR%
   1 Click <b>Install</b>.
   1 Confirm the installation:
%BR%%BR%<a href="%ATTACHURLPATH%/o7.png" target="_blank"><img src="%ATTACHURLPATH%/o7.png" width="600px" /></a>%BR%%BR%
   1 The new certificate should now be installed in Opera's keystore:
%BR%%BR%<a href="%ATTACHURLPATH%/o8.png" target="_blank"><img src="%ATTACHURLPATH%/o8.png" width="600px" /></a>%BR%%BR%
   1 Go to <b>ODS Security</b> -> <b>X.509 Certificates</b>.
   1 The new certificate should be shown in the list of available for the logged in ODS user's certificates :
%BR%%BR%<a href="%ATTACHURLPATH%/o9.png" target="_blank"><img src="%ATTACHURLPATH%/o9.png" width="600px" /></a>%BR%%BR%
   1 Note you have now also the option automatic WebID Login set to enabled -- a powerful feature benefits of which we will demonstrate next in our example: 
   1 Verify the new certificate by performing the following steps:
      1 Log out and access [[https://id.myopenlink.net/ods/][https://id.myopenlink.net/ods/]];
      1 When prompted by your browser, select the new certificate generated above:
%BR%%BR%<a href="%ATTACHURLPATH%/o11.png" target="_blank"><img src="%ATTACHURLPATH%/o11.png" width="600px" /></a>%BR%%BR%
      1 You should then be presented with the ODS Log-in form. Click <b>WebID Login</b>:
%BR%%BR%<a href="%ATTACHURLPATH%/o12.png" target="_blank"><img src="%ATTACHURLPATH%/o12.png" width="600px" /></a>%BR%%BR%
      1 You should now be successfully logged in:
%BR%%BR%<a href="%ATTACHURLPATH%/o13.png" target="_blank"><img src="%ATTACHURLPATH%/o13.png" width="600px" /></a>%BR%%BR%
      1 If you now log in as another user (e.g., <code>demo</code>), you can [[ODSBriefcaseWebIDPerson][share a resource to the above user, using a WebID-based ACL]], which is itself enabled by the new WebID-watermarked X.509 Certificate. 

---++Related

   * [[ODSGenerateX509Certificate][Generating WebID-watermarked X.509 Certificates for Use with ODS]]
   * [[ODSGenerateWebIDX509CertBrsKeystore][Generate an X.509 Certificate (with a WebID watermark) to be managed by a browser-based keystore]]
      * [[ODSGenerateWebIDX509CertBrsKeystoreFF][Firefox]]
   * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSPARQLEndpointProtection][Safeguarding your Virtuoso-hosted SPARQL Endpoint]]
   * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtTipsAndTricksGuideSPARQLEndpointProtection][SPARQL Endpoint Protection Methods Collection]]
   * [[http://docs.openlinksw.com/virtuoso/][Virtuoso documentation]]
      * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html#rdfsupportedprotocolendpoint][SPARQL Service Endpoint]] 
      * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html#rdfsupportedprotocolendpointuri][Service Endpoint Security]] 
      * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html#sparqwebservicetbl][Managing a SPARQL Web Service Endpoint]] 
      * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html][SPARQL]]
   * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtTipsAndTricksGuide][Virtuoso Tips and Tricks Collection]]
      * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSPARQLDET][SPARQL Endpoint DET Configuration Guide]]       
      * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSPARQLSecurityWebID][WebID Protocol & SPARQL Endpoint ACLs Tutorial]]
      * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtOAuthSPARQL][SPARQL OAuth Tutorial]]
      * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtTipsAndTricksGuideSPARQLEndpoints][Securing SPARQL endpoints]]
   * [[OdsSPARQLAuth][SPARUL over SPARQL using the http://cname:port/sparql-auth endpoint]]
   * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtAuthServerUI][Virtuoso Authentication Server UI]]
   * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSPARQLSSL][Manage a SPARQL-WebID based Endpoint]]
   * [[VirtODSSecurityWebID][WebID Protocol Support in OpenLink Data Spaces]].
   * Manage ODS Datadspaces Objects WebID Access Control Lists (ACLs):
      * [[ODSBriefcaseWebID][ODS Briefcase WebID based ACL Guide]]
         * [[ODSBriefcaseWebIDPerson][Person Entity WebID based ACL Guide]]
         * [[ODSBriefcaseWebIDGroup][Group Entity WebID based ACL Guide]]
         * [[ODSBriefcaseWebIDPublic][Public WebID based ACL Guide]]      
      * [[ODSFeedManagerWebIDACL][ODS Feed Manager WebID based ACL Guide]]
         * [[ODSFeedManagerWebIDACLPerson][Person Entity Specific ACL]]
         * [[ODSFeedManagerWebIDACLGroup][Group Entity Specific ACL]]
         * [[ODSFeedManagerWebIDACLPublic][Public Specific ACL for anyone with a WebID]]
      * [[ODSCalendarWebIDACL][ODS Calendar WebID based ACL Guide]]
         * [[ODSCalendarWebIDACLPerson][Person Entity Specific ACL]]
         * [[ODSCalendarWebIDACLGroup][Group Entity Specific ACL]]
         * [[ODSCalendarWebIDACLPublic][Public Specific ACL for anyone with a WebID]]
      * [[ODSBookmarksWebIDACL][ODS Bookmark Manager WebID based ACL Guide]]
         * [[ODSBookmarksWebIDACLPerson][Person Entity Specific ACL]]
         * [[ODSBookmarksWebIDACLGroup][Group Entity Specific ACL]]
         * [[ODSBookmarksWebIDACLPublic][Public Specific ACL for anyone with a WebID]]
      * [[ODSAddressBookWebIDACL][ODS Addressbook  WebID based ACL Guide]]
         * [[ODSAddressBookWebIDACLPerson][Person Entity Specific ACL]]
         * [[ODSAddressBookWebIDACLGroup][Group Entity Specific ACL]]
         * [[ODSAddressBookWebIDACLPublic][Public Specific ACL for anyone with a WebID]]
   * [[ODSPkiSetup][Guide for Set up a X.509 certificate issuer and HTTPS listener and generate ODS user certificates]]
   * [[ODSSetupSSL][Configure Virtuoso+ODS instance as an X.509 Certificate Authority and HTTPS listener]]        
   * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSetupSSL][Configure Virtuoso instance as an X.509 Certificate Authority and HTTPS listener]]
   * [[VirtODSPubSubHub][Setting up PubSubHub in ODS]]
   * [[VirtPubSubHub][PubSubHubBub Demo Client Example]]
   * [[VirtFeedPubSubHub][Feed subscription via PubSubHub protocol Example ]]
   * [[VirtPubSubHubACL][Setting Up PubSubHub to use WebID Protocol or IP based control lists]]
   * [[OdsKeyImport][CA Keys Import using Conductor]]
   * [[ODSGenerateWebIDX509CertOSKeystore][Generate an X.509 Certificate (with a WebID watermark) to be managed by host operating system keystore]]
   * [[ODSWebIDIdP][Using Virtuoso's WebID Verification Proxy Service with a WebID-bearing X.509 certificate]]
   * [[ODSWebIDIdpProxy][Using Virtuoso's WebID Identity Provider (IdP) Proxy Service with an X.509 certificate]]
   * [[ODSBriefcaseWebIDShareFile][ODS Briefcase WebID Protocol Share File Guide]]
   * [[http://esw.w3.org/topic/foaf+ssl][WebID Protocol Specification]]
   * [[https://foaf.me/simpleLogin.php][Test WebID Protocol Certificate page]]
   * [[http://test.foafssl.org/cert/][WebID Protocol Certificate Generation page]]