How to configure Vidispine-server with SSL

Generating and loading keys and certificates

The simplest way is to use the JDK keytool application. It will generate a key pair and certificate directly into a keystore.

CODE

$ keytool -keystore vidispine.keystore -alias vstest -genkey -keyalg RSA
Enter keystore password:
Re-enter new password:
What is your first and last name?
  [Unknown]:  test.vidispine.com
What is the name of your organizational unit?
  [Unknown]:  Vidispine
What is the name of your organization?
  [Unknown]:  Vidispine
What is the name of your City or Locality?
  [Unknown]:  Stockholm
What is the name of your State or Province?
  [Unknown]:  Stockholm
What is the two-letter country code for this unit?
  [Unknown]:  SE
Is CN=Vidispine, OU=Vidispine, O=Vidispine, L=Stockholm, ST=Stockholm, C=SE correct?
  [no]:  yes




Enter key password for 
        (RETURN if same as keystore password):

There are more details documentation from jetty about how to use key pairs generated by OpenSSL and getting certificates from trusted CAs. Please refer to the Jetty SSL configuration documentation.

Configure Vidsipine

Modify the server.yaml file by adding a https connector under the applicationConnectors:

CODE

server:
  applicationConnectors:
  ...
  - type: https
    port: 8443
    keyStorePath: /tmp/vidispine.keystore
    keyStorePassword: vidispine
    validateCerts: no
  ...

Then goto https://localhost:8443/. For more configuration options, please refer to the Dropwizard HTTPS configuration reference.