Before you start

This tutorial is for Java™ developers who want to use SSL to secure their applications on Apache Geronimo. You'll focus on the configuration of Geronimo with a brief example of how to access an SSL session ID within a basic application (the Hello World application from the Geronimo documentation is used as an example). You'll learn how to create keystores and private keys using the Geronimo Server Console and how to configure a new Hypertext Transfer Protocol Secure (HTTPS) listener within Geronimo using your new keystore.

About this tutorial

Apache Geronimo is the Java 2 Platform, Enterprise Edition (J2EE) server project of the Apache Software Foundation (ASF). The aim of the project is to produce a large and healthy community of J2EE developers tasked with the development of an open source, certified J2EE server that:

• Is licensed under the Apache License.
• Passes Sun's Technology Compatibility Kit (TCK) for J2EE 1.4.
• Reuses the best ASF/BSD licensed code available today, with new ASF code to complete the J2EE stack.

HTTPS is the first tier of security, because it works directly with the browser at the application layer. The browser encrypts the data using SSL certificates and sends the request; the hosting server decrypts the data using keys. This application-to-application encryption is highly secure, but getting it to work takes a little know-how.

This tutorial configures Geronimo with SSL and tests the SSL with the Geronimo Hello World application using sessions with security controlled via SSL.

Back to top

Prerequisites

This tutorial assumes:

• You have not done any keystore configuration.
• You have successfully built and deployed the Hello World sample application provided in the Apache Geronimo 1.0 or 1.1 documentation.

Back to top

System requirements

You need to have Apache Geronimo 1.0 or 1.1 installed, configured, and successfully started on your local machine.

1 of 8 | Next

Comments

Back to top

Table of contents

• Before you start
• SSL overview and preparation
• Working with the Apache Geronimo 1.0 keystore
• Working with the Apache Geronimo 1.1 keystore
• Configure an HTTPS listener in Apache Geronimo
• Summary
• Resources
• About the author

---

1 of 8 | Next

Next steps from IBM

With the no-charge DB2 Express-C, Zend Core PHP, and Java you can develop advanced Web 2.0 applications quickly that matter.

---

• Try: Download a free trial version of DB2 Express-C, which includes Zend Core PHP and pureXML technology that is ideally suited for managing both XML and relational data and powering a new breed of SOA and Web 2.0 solutions.
• Article: This IBM Redbook shows how to port PHP apps from MySQL to DB2, and includes code samples for creating Zend Core PHP applications.
• Tutorial: In this Mastering Facebook app development tutorial series, you will use Java and PHP in parallel to build a Facebook interface for an online stock trading J2EE application using the Spring framework.
• Buy: DB2 9 for Linux, UNIX and Windows

Dig deeper into Open source on developerWorks

Try IBM PureSystems. No charge.

Experience today!

---

Get started with the cloud-based trial and pattern development kit.