On May 30, 2014, at 12:46 PM, jler...@apache.org wrote:

> Author: jleroux
> Date: Fri May 30 10:46:54 2014
> New Revision: 1598544
> 
> URL: http://svn.apache.org/r1598544
> Log:
> Adds a new self signed SSL certificate created on the OFBiz demo VM with own 
> CA followinghttp://httpd.apache.org/docs/current/ssl/ssl_faq.html#realcert
> This certificate is valid for 10 years (until May 27 08:43:19 2024 GMT)
> Characteristics: C=US, ST=DE, L=Wilmington, O=Apache Software Fundation, 
> OU=Apache OFBiz, CN=ofbiz-vm.apache.org/emailAddress=dev@ofbiz.apache.org
> The password is still the same: changeit, I checked: HTTPS works locally
> 
> I don't really understand the content and the need of framework/base/cert/ so 
> I only added framework/base/cert/demoCA/newcerts/03.pem and 
> framework/base/cert/README which explains this change

I have reviewed the content of framework/base/cert/ and I think we can remove 
the whole folder; I have also reviewed the key you have added to the ofbizssl 
keystore and it looks good; that file is enough to get the public (self signed) 
certificate or even the private key (using keytool).

Jacopo

> 
> Added:
>    ofbiz/trunk/framework/base/cert/README   (with props)
>    ofbiz/trunk/framework/base/cert/demoCA/newcerts/03.pem
> Modified:
>    ofbiz/trunk/framework/base/config/ofbizssl.jks

Reply via email to