Chapter 5. Generating the Keystore

Table of Contents

Configure KSB to use the keystore

For client applications to consume secured services hosted from a Rice server, you must generate a keystore. As an initial setup, you can use the keystore provided by Rice. There are three ways to get this keystore:

  1. If you are doing a source code build of Rice, it is in the directory <source root>/security and it has a file name of rice.keystore

    Note

    r1c3pw is the password used for the example provided.
  2. The keystore is also located in the server distribution under the security directory.

    Note

    keypass and storepass should be the same. r1c3pw is the password used for the example provided
  3. You can generate the keystore yourself. Please refer to the KSB Technical Reference Guide for the steps to accomplish this.

Configure KSB to use the keystore

You must have these params in the xml config to allow KSB to use the keystore:

<param>/usr/local/rice/rice.keystore</param>
<param>rice</param>
<param>r1c3pw</param>
  • keystore.file - The location of the keystore

  • keystore.alias - The alias used in creating the keystore above

  • keystore.password - This is the password of the alias AND the keystore. This assumes that the keystore is set up so that these are the same.