---+ Configure Virtuoso+ODS instance as an X.509 Certificate Authority and HTTPS listener

%TOC%

---++Configure an HTTPS Listener for handling HTTPS requests from HTTP user agents (clients)

   1 Install [[https://virtuoso.openlinksw.com/download/][Conductor]] VAD package.
   1 Go to the <b><code><nowiki>http://cname:port/conductor</nowiki></code></b> URL, enter the DBA user credentials.
%BR%%BR%  <img src="%ATTACHURLPATH%/Picture02.png" />%BR%%BR%
   1 Go to System Admin-&gt;Security:
%BR%%BR%<img src="%ATTACHURLPATH%/Picture03.png" />%BR%%BR%
   1 Enter the Issuer details and click Generate:
%BR%%BR%<img src="%ATTACHURLPATH%/Picture04.png" />%BR%%BR%
   1 Click Configure HTTPS Listeners:
%BR%%BR%<img src="%ATTACHURLPATH%/Picture05.png" />%BR%%BR%
   1 Edit the new listener, and click "Generate New" key:
%BR%%BR%<img src="%ATTACHURLPATH%/Picture06.png" />%BR%%BR%
   1 Click Save:
%BR%%BR%<img src="%ATTACHURLPATH%/Picture07.png" />%BR%%BR%
   1 Additionally, the generated for the Virtuoso HTTPS endpoint Web Server Certificate will be listed in the "Cryptographic Keys" section in user "dba" properties form at System Admin -> Users Accounts ->Users -> "dba" -> "Edit":
%BR%%BR%<img src="%ATTACHURLPATH%/Picture071.png" />
%BR%<img src="%ATTACHURLPATH%/Picture072.png" />%BR%%BR%

---++Configure an HTTPS Listener for ODS Endpoints

   1 Suppose the steps from above are performed and also is installed [[https://virtuoso.openlinksw.com/download/][ODS Framework]] VAD package.
   1 Go to Conductor -> Security -> Configure HTTPS Listeners
   1 Click Configure ODS Endpoints:
%BR%%BR%<img src="%ATTACHURLPATH%/Picture08.png" />%BR%%BR%
   1 Click "Create New Endpoint":
%BR%%BR%<img src="%ATTACHURLPATH%/Picture09.png" />%BR%%BR%
   1 Enter the home path for ODS, and save.
   1 The new endpoint should be created:
%BR%%BR%<img src="%ATTACHURLPATH%/Picture11.png" />%BR%%BR%
   1 Go to the HTTPS site, e.g., <b><code><nowiki>https://cname:port/ods</nowiki></code></b>; in our example, <b><code><nowiki>https://localhost:4433/ods/</nowiki></code></b>. If Firefox is used, it will complain that the certificate is not valid, so we must register the site's certificate.
%BR%%BR%<img src="%ATTACHURLPATH%/Picture12.png" />%BR%%BR%
   1 In Firefox certificate manager, Site's certificates add an exception: Firefox Tools -&gt; Options -&gt; View Certificates -&gt; Servers -&gt; Add Exception, 
%BR%%BR%<img src="%ATTACHURLPATH%/Picture13.png" />%BR%%BR%
   1 Confirm exception.
%BR%%BR%<img src="%ATTACHURLPATH%/Picture14.png" />%BR%%BR%


---++Related
       
   * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSPARQLEndpointProtection][Safeguarding your Virtuoso-hosted SPARQL Endpoint]]
   * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtTipsAndTricksGuideSPARQLEndpointProtection][SPARQL Endpoint Protection Methods Collection]]
   * [[http://docs.openlinksw.com/virtuoso/][Virtuoso documentation]]
      * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html#rdfsupportedprotocolendpoint][SPARQL Service Endpoint]] 
      * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html#rdfsupportedprotocolendpointuri][Service Endpoint Security]] 
      * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html#sparqwebservicetbl][Managing a SPARQL Web Service Endpoint]] 
      * [[http://docs.openlinksw.com/virtuoso/rdfsparql.html][SPARQL]]
   * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtTipsAndTricksGuide][Virtuoso Tips and Tricks Collection]]
      * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSPARQLDET][SPARQL Endpoint DET Configuration Guide]]       
      * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSPARQLSecurityWebID][WebID Protocol & SPARQL Endpoint ACLs Tutorial]]
      * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtOAuthSPARQL][SPARQL OAuth Tutorial]]
      * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtTipsAndTricksGuideSPARQLEndpoints][Securing SPARQL endpoints]]
   * [[OdsSPARQLAuth][SPARUL over SPARQL using the http://cname:port/sparql-auth endpoint]]
   * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtAuthServerUI][Virtuoso Authentication Server UI]]
   * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSPARQLSSL][Manage a SPARQL-WebID based Endpoint]]
   * [[VirtODSSecurityWebID][WebID Protocol Support in OpenLink Data Spaces]].
   * Manage ODS Datadspaces Objects WebID Access Control Lists (ACLs):
      * [[ODSBriefcaseWebID][ODS Briefcase WebID based ACL Guide]]
         * [[ODSBriefcaseWebIDPerson][Person Entity WebID based ACL Guide]]
         * [[ODSBriefcaseWebIDGroup][Group Entity WebID based ACL Guide]]
         * [[ODSBriefcaseWebIDPublic][Public WebID based ACL Guide]]      
      * [[ODSFeedManagerWebIDACL][ODS Feed Manager WebID based ACL Guide]]
         * [[ODSFeedManagerWebIDACLPerson][Person Entity Specific ACL]]
         * [[ODSFeedManagerWebIDACLGroup][Group Entity Specific ACL]]
         * [[ODSFeedManagerWebIDACLPublic][Public Specific ACL for anyone with a WebID]]
      * [[ODSCalendarWebIDACL][ODS Calendar WebID based ACL Guide]]
         * [[ODSCalendarWebIDACLPerson][Person Entity Specific ACL]]
         * [[ODSCalendarWebIDACLGroup][Group Entity Specific ACL]]
         * [[ODSCalendarWebIDACLPublic][Public Specific ACL for anyone with a WebID]]
      * [[ODSBookmarksWebIDACL][ODS Bookmark Manager WebID based ACL Guide]]
         * [[ODSBookmarksWebIDACLPerson][Person Entity Specific ACL]]
         * [[ODSBookmarksWebIDACLGroup][Group Entity Specific ACL]]
         * [[ODSBookmarksWebIDACLPublic][Public Specific ACL for anyone with a WebID]]
      * [[ODSAddressBookWebIDACL][ODS Addressbook  WebID based ACL Guide]]
         * [[ODSAddressBookWebIDACLPerson][Person Entity Specific ACL]]
         * [[ODSAddressBookWebIDACLGroup][Group Entity Specific ACL]]
         * [[ODSAddressBookWebIDACLPublic][Public Specific ACL for anyone with a WebID]]
   * [[ODSPkiSetup][Guide for Set up a X.509 certificate issuer and HTTPS listener and generate ODS user certificates.]]
   * [[http://virtuoso.openlinksw.com/dataspace/dav/wiki/Main/VirtSetupSSL][Configure Virtuoso instance as an X.509 Certificate Authority and HTTPS listener]]
   * [[VirtODSPubSubHub][Setting up PubSubHub in ODS]]
   * [[VirtPubSubHub][PubSubHubBub Demo Client Example]]
   * [[VirtFeedPubSubHub][Feed subscription via PubSubHub protocol Example ]]
   * [[VirtPubSubHubACL][Setting Up PubSubHub to use WebID Protocol or IP based control lists]]
   * [[OdsKeyImport][CA Keys Import using Conductor]]
   * [[ODSGenerateX509Certificate][Generate an X.509 Certificate hosted WebID Guide]]
   * [[ODSGenerateWebIDX509CertOSKeystore][Generate an X.509 Certificate (with a WebID watermark) to be managed by host operating system keystore]]
   * [[ODSGenerateWebIDX509CertBrsKeystore][Generate an X.509 Certificate (with a WebID watermark) to be managed by a browser-based keystore]]
   * [[ODSWebIDIdP][Using Virtuoso's WebID Verification Proxy Service with a WebID-bearing X.509 certificate]]
   * [[ODSWebIDIdpProxy][Using Virtuoso's WebID Identity Provider (IdP) Proxy Service with an X.509 certificate]]
   * [[ODSBriefcaseWebIDShareFile][ODS Briefcase WebID Protocol Share File Guide]]
   * [[http://esw.w3.org/topic/foaf+ssl][WebID Protocol Specification]]
   * [[https://foaf.me/simpleLogin.php][Test WebID Protocol Certificate page]]
   * [[http://test.foafssl.org/cert/][WebID Protocol Certificate Generation page]]