NEW Web Server Config Page and SSL / TLS Setup Wizard

Are you sure there is no passphrase on the SSL key? (Microsoft tools seem to put an empty passphase unconditionally, which is not the same as no passphrase. Many people here use OpenSSL to handle security to get around this MS flaw.)

ssl.pfx is password protected but don't know how to call that password. how to let ssl.pfx know that it has to access this password.

Remove the password.

The team in my organization who generate this ssl.pfx file they said It is mandatory to keep the password.

Any other ways that we can go with password protected ssl.pfx file?

By default the password on the ssl.pfx file is expected to be "ignition".

If it must be set to something else, you can set this property in the additional parameters section of iginition.conf:

-Dignition.gateway.ssl.keystorePassword=MyKeyStorePassword

If there is a password protecting the individual private key entry itself as well, it can be set using:

-Dignition.gateway.ssl.privateKeyPassword=MyPrivateKeyPassword

the alias/name of the entry should be "ignition". If not:

-Dignition.gateway.ssl.keystoreAlias=MyAlias
1 Like