Configuring Non-JKS KeyStore with GlassFish V3

Configuring Non-JKS Server KeyStore for GlassFish V3. The Java KeyStore API supports multiple keystore formats which include JKS( the default Java KeyStore), PKCS12, PKCS11 etc. By default when GlassFish V3 is installed the default Keystore Type is JKS and the server keystore (keystore.jks) is located in the domain config directory.  With latest GlassFish V3 builds it should be possible to define a different KeyStore Type such as PKCS11 or PKCS12 for the KeyStore type and use a corresponding PKCS11 or PKCS12 store as the server keystore. Here are the steps to configure GlassFish V3 with a PKCS12 keystore as the server keystore. All the steps mentioned here can be achieved by using the Admin GUI however i would just show the resultant change in domain.xml 1. Install the PKCS12 (.pfx/.p12) Keystore inside the domain config dir (such as domains/domain1/config). Assuming the name of the KeyStore is s1as.p12 copy the file into the config dir 2. Update the jvm-options corresponding to keystore and truststore settings to look as follows :            -Djavax.net.ssl.trustStore=${com.sun.aas.instanceRoot}/config/cacerts.jks         -Djavax.net.ssl.keyStore=${com.sun.aas.instanceRoot}/config/s1as.p12         -Djavax.net.ssl.keyStoreType=PKCS12  &...

Date: August, 26 2009
Url: http://www.java.net/blog/kumarjayanti/archive/2009/08/26/configuring-non-jks-keystore-glassfish-v3

Others News