| create-ssl(1) asadmin Utility Subcommands create-ssl(1) |
| |
| NAME |
| create-ssl - creates and configures the SSL element in the selected |
| HTTP listener, IIOP listener, or IIOP service |
| |
| SYNOPSIS |
| create-ssl [--help] |
| [--target target] |
| --type listener_or_service_type |
| --certname cert_name |
| [--ssl2enabled={false|true}] [--ssl2ciphers ss12ciphers] |
| [--ssl3enabled={true|false}] [--tlsenabled={true|false}] |
| [--ssl3tlsciphers ssl3tlsciphers] |
| [--tlsrollbackenabled={true|false}] |
| [--clientauthenabled={false|true}] |
| [listener_id] |
| |
| DESCRIPTION |
| The create-ssl subcommand creates and configures the SSL element in the |
| selected HTTP listener, IIOP listener, or IIOP service to enable secure |
| communication on that listener/service. |
| |
| This subcommand is supported in remote mode only. |
| |
| OPTIONS |
| If an option has a short option name, then the short option precedes |
| the long option name. Short options have one dash whereas long options |
| have two dashes. |
| |
| --help, -? |
| Displays the help text for the subcommand. |
| |
| --target |
| Specifies the target on which you are configuring the ssl element. |
| The following values are valid: |
| |
| server |
| Specifies the server in which the iiop-service or HTTP/IIOP |
| listener is to be configured for SSL. |
| |
| config |
| Specifies the configuration that contains the HTTP/IIOP |
| listener or iiop-service for which SSL is to be configured. |
| |
| cluster |
| Specifies the cluster in which the HTTP/IIOP listener or |
| iiop-service is to be configured for SSL. All the server |
| instances in the cluster will get the SSL configuration for the |
| respective listener or iiop-service. |
| |
| instance |
| Specifies the instance in which the HTTP/IIOP listener or |
| iiop-service is to be configured for SSL. |
| |
| --type |
| The type of service or listener for which the SSL is created. The |
| type can be: |
| |
| * network-listener |
| |
| * http-listener |
| |
| * iiop-listener |
| |
| * iiop-service |
| |
| * jmx-connector |
| |
| When the type is iiop-service, the ssl-client-config along with the |
| embedded ssl element is created in domain.xml. |
| |
| --certname |
| The nickname of the server certificate in the certificate database |
| or the PKCS#11 token. The format of the name in the certificate is |
| tokenname:nickname. For this property, the tokenname: is optional. |
| |
| --ssl2enabled |
| Set this property to true to enable SSL2. The default value is |
| false. If both SSL2 and SSL3 are enabled for a virtual server, the |
| server tries SSL3 encryption first. In the event SSL3 encryption |
| fails, the server then tries SSL2 encryption. |
| |
| --ssl2ciphers |
| A comma-separated list of the SSL2 ciphers to be used. Ciphers not |
| explicitly listed will be disabled for the target, even if those |
| ciphers are available in the particular cipher suite you are using. |
| If this option is not used, all supported ciphers are assumed to be |
| enabled. Allowed values are: |
| |
| * rc4 |
| |
| * rc4export |
| |
| * rc2 |
| |
| * rc2export |
| |
| * idea |
| |
| * des |
| |
| * desede3 |
| |
| --ssl3enabled |
| Set this property to false to disable SSL3. The default value is |
| true. If both SSL2 and SSL3 are enabled for a virtual server, the |
| server tries SSL3 encryption first. In the event SSL3 encryption |
| fails, the server then tries SSL2 encryption. |
| |
| --tlsenabled |
| Set this property to false to disable TLS. The default value is |
| true It is good practice to enable TLS, which is a more secure |
| version of SSL. |
| |
| --ssl3tlsciphers |
| A comma-separated list of the SSL3 and/or TLS ciphers to be used. |
| Ciphers not explicitly listed will be disabled for the target, even |
| if those ciphers are available in the particular cipher suite you |
| are using. If this option is not used, all supported ciphers are |
| assumed to be enabled. Allowed values are: |
| |
| * SSL_RSA_WITH_RC4_128_MD5 |
| |
| * SSL_RSA_WITH_3DES_EDE_CBC_SHA |
| |
| * SSL_RSA_WITH_DES_CBC_SHA |
| |
| * SSL_RSA_EXPORT_WITH_RC4_40_MD5 |
| |
| * SSL_RSA_WITH_NULL_MD5 |
| |
| * SSL_RSA_WITH_RC4_128_SHA |
| |
| * SSL_RSA_WITH_NULL_SHA |
| |
| --tlsrollbackenabled |
| Set to true (default) to enable TLS rollback. TLS rollback should |
| be enabled for Microsoft Internet Explorer 5.0 and 5.5. This option |
| is only valid when -tlsenabled=true. |
| |
| --clientauthenabled |
| Set to true if you want SSL3 client authentication performed on |
| every request independent of ACL-based access control. Default |
| value is false. |
| |
| OPERANDS |
| listener_id |
| The ID of the HTTP or IIOP listener for which the SSL element is to |
| be created. The listener_id is not required if the --type is |
| iiop-service. |
| |
| EXAMPLES |
| Example 1, Creating an SSL element for an HTTP listener |
| The following example shows how to create an SSL element for an |
| HTTP listener named http-listener-1. |
| |
| asadmin> create-ssl |
| --type http-listener |
| --certname sampleCert http-listener-1 |
| Command create-ssl executed successfully. |
| |
| EXIT STATUS |
| 0 |
| subcommand executed successfully |
| |
| 1 |
| error in executing the subcommand |
| |
| SEE ALSO |
| delete-ssl(1) |
| |
| asadmin(1M) |
| |
| Java EE 8 11 Feb 2011 create-ssl(1) |
