Siemens XT65 User Manual page 102

Java User's Guide
12.1 Secure Data Transfer
112
5. Import CA root certificate and CA private key into java keystore
- Use the CA Root Certificate for the creation of Java Security Command. See
12.5.3.
- Execute command
>java -jar setprivatekey.jar -alias dummyca
-storepass keystorepass -keystore customer.ks
-keypass cakeypass
-keyfile ./democa/private/cakey.der -certfile ./democa/cacert.der
6. Export private key from server certificate
- The private key is needed for the (HTTPS or Secure Connection)server configuration.
- Execute command
java -jar getprivatekey.jar -alias server
-keystore customer.ks -storepass keystorepass
-keypass keypass -keyfile server_privkey.der
- Convert format
>openssl pkcs8 -in server_privkey.der
-inform DER -out server_privkey.pem
-outform PEM -nocrypt
7. Send CA Root Certificate to the module
- Create Java Security Command "SetRootCert". See
- Send this command with AT^SJSEC to the module. See
8. Send Java Security Command "Switch on Certificate Verification for HTTPS Connections"
to the module. See
Result:
- You have a keystore for the configuration of the Java Security of the module.
- You have a signed server certificate (files "server.pem" or "server.der").
- You have a private key file for your server configuration (files "server_privkey.pem" or
"server_privkey.der.
- The module contains the CA Root Certificat.
- HTTPS certificate verification is activate.
Consult the documentation of your web server on how to set.up the certificate on it.
wm_java_usersguide_v12
Confidential / Released
Section 12.5.3.
Page 102 of 123
s
Section 12.5.3.
Section 12.4.3.
Section
2008-02-25