This HTML5 document contains 85 embedded RDF statements represented using HTML+Microdata notation.

The embedded RDF content will be recognized by any processor of HTML5 Microdata.

Subject Item

n23:this

foaf:made

n2:ODSGenerateWebIDX509CertBrsKeystoreFF

Subject Item

n9:item

n8:services_of

n2:ODSGenerateWebIDX509CertBrsKeystoreFF

Subject Item

n7:this

sioc:creator_of

n2:ODSGenerateWebIDX509CertBrsKeystoreFF

Subject Item

n22:ODS

sioc:container_of

n2:ODSGenerateWebIDX509CertBrsKeystoreFF

atom:entry

n2:ODSGenerateWebIDX509CertBrsKeystoreFF

atom:contains

n2:ODSGenerateWebIDX509CertBrsKeystoreFF

Subject Item

n2:ODSGenerateWebIDX509CertBrsKeystoreFF

rdf:type

atom:Entry sioct:Comment

dcterms:created

2017-06-13T06:03:22.252160

dcterms:modified

2017-06-29T07:29:30.552886

rdfs:label

ODSGenerateWebIDX509CertBrsKeystoreFF

foaf:maker

n16:this n23:this

dc:title

ODSGenerateWebIDX509CertBrsKeystoreFF

opl:isDescribedUsing

n30:rdf

sioc:has_creator

n7:this n21:this

sioc:attachment

n25:png n26:png n27:png n28:png n31:png n32:png n34:png n35:png n36:png n37:png n38:png n39:png n40:png n41:png

sioc:content

%META:TOPICPARENT{name="ODSGenerateWebIDX509CertBrsKeystore"}% ---+Generate an X.509 Certificate (with a WebID watermark) to be managed by the Firefox browser-based keystore ---++ Prerequisites 1. [[ODSSetupSSL][Set up an X.509 certificate issuer and HTTPS listener]]. 1. [[ODSX509GenerateIESetService][Set up an X.509 Certificate Service]]. ---++ Certificate Generation Process These steps will work against any ODS instance where you have the requisite privileges. 1 Go to the ODS home page (local or remote) and log in as an ODS user (registering as such first, if necessary). %BR%%BR%<a href="%ATTACHURLPATH%/f1.png" target="_blank"><img src="%ATTACHURLPATH%/f1.png" width="600px" /></a>%BR%%BR% 1 After log in, you will have an ODS-generated Person Entity Identifier (an HTTP URI that Identifies "You") of the form: <code><nowiki>http://cname/dataspace/person/user-name#this</nowiki></code> %BR%%BR%<a href="%ATTACHURLPATH%/f1a.png" target="_blank"><img src="%ATTACHURLPATH%/f1a.png" width="600px" /></a>%BR%%BR% 1 Fill out your profile, if still in default state. <i>(<b>Note:</b> If this step is skipped, the resulting X.509 certificate may not have a human-readable name.)</i> %BR%%BR%<a href="%ATTACHURLPATH%/f2.png" target="_blank"><img src="%ATTACHURLPATH%/f2.png" width="600px" /></a>%BR%%BR% 1 Go to <b>Security</b>: %BR%%BR%<a href="%ATTACHURLPATH%/f3.png" target="_blank"><img src="%ATTACHURLPATH%/f3.png" width="600px" /></a>%BR%%BR% 1 Go to <b>Certificate Generator</b>: %BR%%BR%<a href="%ATTACHURLPATH%/f4.png" target="_blank"><img src="%ATTACHURLPATH%/f4.png" width="600px" /></a>%BR%%BR% 1 Fill out the form, for example: * <b>Country:</b> <code>UK</code>; * <b>Organization:</b> <code>OL</code>; * <b>Valid for:</b> <code>90 hours</code>. %BR%%BR%<a href="%ATTACHURLPATH%/f5.png" target="_blank"><img src="%ATTACHURLPATH%/f5.png" width="600px" /></a>%BR%%BR% 1 Click <b>Submit certificate request.</b> 1 Firefox should show that it is generating a private key: %BR%%BR%<a href="%ATTACHURLPATH%/f6.png" target="_blank"><img src="%ATTACHURLPATH%/f6.png" width="600px" /></a>%BR%%BR% 1 When private key generation is finished, Firefox should report a successful installation of the certificate: %BR%%BR%<a href="%ATTACHURLPATH%/f6a.png" target="_blank"><img src="%ATTACHURLPATH%/f6a.png" width="600px" /></a>%BR%%BR% 1 Go to <b>X.509 Certificates</b>. 1 The new certificate should be shown in the list of certificates available for the ODS user: %BR%%BR%<a href="%ATTACHURLPATH%/f7.png" target="_blank"><img src="%ATTACHURLPATH%/f7.png" width="600px" /></a>%BR%%BR% 1 Note you have now also the option automatic WebID Login set to enabled -- a powerful feature benefits of which we will demonstrate next in our example: %BR%%BR%<a href="%ATTACHURLPATH%/f7a.png" target="_blank"><img src="%ATTACHURLPATH%/f7a.png" width="600px" /></a>%BR%%BR% 1 Verify the new certificate by performing the following steps: 1 Log out and access [[https://id.myopenlink.net/ods/][https://id.myopenlink.net/ods/]]; 1 When prompted by your browser, select the new certificate generated above: %BR%%BR%<a href="%ATTACHURLPATH%/f9.png" target="_blank"><img src="%ATTACHURLPATH%/f9.png" width="600px" /></a>%BR%%BR% 1 You should then be presented with the ODS Log-in form. Click <b>WebID Login</b>: %BR%%BR%<a href="%ATTACHURLPATH%/f10.png" target="_blank"><img src="%ATTACHURLPATH%/f10.png" width="600px" /></a>%BR%%BR% 1 You should now be successfully logged in: %BR%%BR%<a href="%ATTACHURLPATH%/f11.png" target="_blank"><img src="%ATTACHURLPATH%/f11.png" width="600px" /></a>%BR%%BR% 1 If you now log in as another user (e.g., <code>demo</code>), you can [[ODSBriefcaseWebIDPerson][share a resource to the above user, using a WebID-based ACL]], which is itself enabled by the new WebID-watermarked X.509 Certificate. ---++Related * [[ODSGenerateX509Certificate][Generating WebID-watermarked X.509 Certificates for Use with ODS]] * [[ODSGenerateWebIDX509CertBrsKeystore][Generate an X.509 Certificate (with a WebID watermark) to be managed by a browser-based keystore]] * [[ODSGenerateWebIDX509CertBrsKeystoreOpera][Opera]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSPARQLEndpointProtection][Safeguarding your Virtuoso-hosted SPARQL Endpoint]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtTipsAndTricksGuideSPARQLEndpointProtection][SPARQL Endpoint Protection Methods Collection]] * [[http://docs.openlinksw.com/virtuoso/][Virtuoso documentation]] * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html#rdfsupportedprotocolendpoint][SPARQL Service Endpoint]] * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html#rdfsupportedprotocolendpointuri][Service Endpoint Security]] * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html#sparqwebservicetbl][Managing a SPARQL Web Service Endpoint]] * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html][SPARQL]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtTipsAndTricksGuide][Virtuoso Tips and Tricks Collection]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSPARQLDET][SPARQL Endpoint DET Configuration Guide]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSPARQLSecurityWebID][WebID Protocol & SPARQL Endpoint ACLs Tutorial]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtOAuthSPARQL][SPARQL OAuth Tutorial]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtTipsAndTricksGuideSPARQLEndpoints][Securing SPARQL endpoints]] * [[OdsSPARQLAuth][SPARUL over SPARQL using the http://cname:port/sparql-auth endpoint]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtAuthServerUI][Virtuoso Authentication Server UI]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSPARQLSSL][Manage a SPARQL-WebID based Endpoint]] * [[VirtODSSecurityWebID][WebID Protocol Support in OpenLink Data Spaces]]. * Manage ODS Datadspaces Objects WebID Access Control Lists (ACLs): * [[ODSBriefcaseWebID][ODS Briefcase WebID based ACL Guide]] * [[ODSBriefcaseWebIDPerson][Person Entity WebID based ACL Guide]] * [[ODSBriefcaseWebIDGroup][Group Entity WebID based ACL Guide]] * [[ODSBriefcaseWebIDPublic][Public WebID based ACL Guide]] * [[ODSFeedManagerWebIDACL][ODS Feed Manager WebID based ACL Guide]] * [[ODSFeedManagerWebIDACLPerson][Person Entity Specific ACL]] * [[ODSFeedManagerWebIDACLGroup][Group Entity Specific ACL]] * [[ODSFeedManagerWebIDACLPublic][Public Specific ACL for anyone with a WebID]] * [[ODSCalendarWebIDACL][ODS Calendar WebID based ACL Guide]] * [[ODSCalendarWebIDACLPerson][Person Entity Specific ACL]] * [[ODSCalendarWebIDACLGroup][Group Entity Specific ACL]] * [[ODSCalendarWebIDACLPublic][Public Specific ACL for anyone with a WebID]] * [[ODSBookmarksWebIDACL][ODS Bookmark Manager WebID based ACL Guide]] * [[ODSBookmarksWebIDACLPerson][Person Entity Specific ACL]] * [[ODSBookmarksWebIDACLGroup][Group Entity Specific ACL]] * [[ODSBookmarksWebIDACLPublic][Public Specific ACL for anyone with a WebID]] * [[ODSAddressBookWebIDACL][ODS Addressbook WebID based ACL Guide]] * [[ODSAddressBookWebIDACLPerson][Person Entity Specific ACL]] * [[ODSAddressBookWebIDACLGroup][Group Entity Specific ACL]] * [[ODSAddressBookWebIDACLPublic][Public Specific ACL for anyone with a WebID]] * [[ODSPkiSetup][Guide for Set up a X.509 certificate issuer and HTTPS listener and generate ODS user certificates.]] * [[ODSSetupSSL][Configure Virtuoso+ODS instance as an X.509 Certificate Authority and HTTPS listener]] * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSetupSSL][Configure Virtuoso instance as an X.509 Certificate Authority and HTTPS listener]] * [[VirtODSPubSubHub][Setting up PubSubHub in ODS]] * [[VirtPubSubHub][PubSubHubBub Demo Client Example]] * [[VirtFeedPubSubHub][Feed subscription via PubSubHub protocol Example ]] * [[VirtPubSubHubACL][Setting Up PubSubHub to use WebID Protocol or IP based control lists]] * [[OdsKeyImport][CA Keys Import using Conductor]] * [[ODSWebIDIdP][Using Virtuoso's WebID Verification Proxy Service with a WebID-bearing X.509 certificate]] * [[ODSWebIDIdpProxy][Using Virtuoso's WebID Identity Provider (IdP) Proxy Service with an X.509 certificate]] * [[ODSBriefcaseWebIDShareFile][ODS Briefcase WebID Protocol Share File Guide]] * [[http://esw.w3.org/topic/foaf+ssl][WebID Protocol Specification]] * [[https://foaf.me/simpleLogin.php][Test WebID Protocol Certificate page]] * [[http://test.foafssl.org/cert/][WebID Protocol Certificate Generation page]]

sioc:id

46f51d93de1fdff8e8109d14c00d9664

sioc:link

n2:ODSGenerateWebIDX509CertBrsKeystoreFF

sioc:has_container

n22:ODS

n8:has_services

n9:item

atom:title

ODSGenerateWebIDX509CertBrsKeystoreFF

sioc:links_to

n2:ODSCalendarWebIDACL n2:ODSFeedManagerWebIDACLPublic n2:ODSBriefcaseWebIDPerson n2:ODSBriefcaseWebID n2:ODSFeedManagerWebIDACL n2:ODSBriefcaseWebIDPublic n10: n11:VirtSetupSSL n12: n13:ssl n14:php n11:VirtSPARQLSecurityWebID n11:VirtTipsAndTricksGuideSPARQLEndpoints n11:VirtTipsAndTricksGuide n11:VirtSPARQLDET n11:VirtSPARQLEndpointProtection n17:html n18:rdfsupportedprotocolendpointuri n18:sparqwebservicetbl n19: n18:rdfsupportedprotocolendpoint n20:WebID n2:ODSGenerateWebIDX509CertBrsKeystore n2:ODSAddressBookWebIDACLGroup n2:ODSAddressBookWebIDACLPerson n2:ODSBookmarksWebIDACLPublic n2:ODSBookmarksWebIDACLGroup n2:ODSAddressBookWebIDACLPublic n11:VirtTipsAndTricksGuideSPARQLEndpointProtection n2:ODSAddressBookWebIDACL n2:ODSCalendarWebIDACLPerson n2:ODSCalendarWebIDACLPublic n2:ODSBriefcaseWebIDGroup n2:ODSCalendarWebIDACLGroup n2:ODSBookmarksWebIDACLPerson n2:ODSBookmarksWebIDACL n11:VirtOAuthSPARQL n2:ODSFeedManagerWebIDACLGroup n11:VirtSPARQLSSL n11:VirtAuthServerUI n2:ODSFeedManagerWebIDACLPerson

atom:source

n22:ODS

atom:author

n23:this

atom:published

2017-06-13T06:03:22Z

atom:updated

2017-06-29T07:29:30Z

sioc:topic

n22:ODS

Subject Item

n2:ODSGenerateWebIDX509CertBrsKeystoreOpera

sioc:links_to

n2:ODSGenerateWebIDX509CertBrsKeystoreFF

Subject Item

n21:this

sioc:creator_of

n2:ODSGenerateWebIDX509CertBrsKeystoreFF