Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

ParameterRequiredDescriptionExample
--helpNoShows the usage information, this option has to be specified as the only command line option and has no value.
--tokenYes

UUID of the token for one-time authentication to JOC Cockpit to receive keys and certificates.

--token=73bfc4b8-3f15-44b9-a75b-cdb44aec8f4b
--subject-dnYes

The SubjectDN to be used consisting of [CN, OU, O, L, S,C] where the current hostname has to be set as CN.

--subject-dn="CN=myControllerHostname, OU=development, O=SOS,  L=Berlin, S=Berlin, C=DE"
--sanYes

The subject alternative names(SAN) should be set with variation of the hostname e.g. including the domain part. The alternatives are separated by comma.

--san="myControllerHostname.sos, myControllerHostname, sp.sos, sp"
--joc-uriYes

URI of the JS7 JOC to receive the generated certificates from.

--joc-uri=https://joc-2-0-secondary:4443
--source-keystoreNo

Path of the Keystore holding the keys to connect to JS7 JOC over HTTPS.

--source-keystore=C:/sp/devel/js7/keys/sp-keystore.p12
--source-keystore-typeNo

Type of the keystore to connect to JS7 JOC over HTTPS. (PKCS12[default] and JKS are supported only)

--source-keystore-type=PKCS12
--source-keystore-passNo

Password for the keystore holding the keys to connect to JS7 JOC over HTTPS.

--source-keystore-pass="YourKeystorePassword"
--source-keystore-entry-passNo

Password for the private key entry of the keystore holding the keys to connect to JS7 JOC over HTTPS.

--source-keystore-entry-pass="YourKeystoreEntryPassword"
--source-truststoreNo

Path of the Truststore holding the trusted certificates to connect to JS7 JOC over HTTPS.

--source-truststore=C:/sp/devel/js7/keys/sp-truststore.p12
--source-truststore-typeNo

Type of the truststore to connect to JS7 JOC over HTTPS. (PKCS12[default] and JKS are supported only)

--source-truststore-type=PKCS12
--source-truststore-passNo

Password for the truststore holding the keys to connect to JS7 JOC over HTTPS.

--source-truststore-pass="YourTruststorePassword"
--source-private-keyNo

Path to the private Key file used to connect to JS7 JOC over HTTPS.

--source-private-key=C:/sp/devel/js7/keys/sp/sp.key
--source-certificateNo

Path to the certificate file used to connect to JS7 JOC over HTTPS.

--source-certificate=C:/sp/devel/js7/keys/sp/sp.cer
--source-ca-certNo

Path to the CA certificate file(s) used to connect to JS7 JOC over HTTPS. (Comma separated)

--source-ca-cert="C:/sp/devel/js7/keys/sp/sos_intermediate_ca.cer, C:/sp/devel/js7/keys/sp/sos_root_ca.cer"
--target-keystore=Yes

Path to the Keystore where the generated SSL certificates and keys should be stored.

--target-keystore=C:/sp/devel/js7/testing/CLI/controller/https-keystore.p12
--target-keystore-typeNo

Type of the keystore to store to. (PKCS12[default] and JKS are supported only)

--target-keystore-type=PKCS12
--target-keystore-passNo

Password for the keystore to store to.

--target-keystore-pass="YourKeystorePassword"
--target-keystore-entry-passNo

Password for the private key/certificate entry of the target keystore holding the keys for mutual https.

--target-keystore-entry-pass="YourKeystoreEntryPassword"
--target-truststoreYes

Path to the Truststore where the trusted ca certificate should be stored.

--target-truststore=C:/sp/devel/js7/testing/CLI/controller/https-truststore.p12
--target-truststore-typeNo

Type of the truststore to store to. (PKCS12[default] and JKS are supported only)

--target-truststore-type=PKCS12
--target-truststore-passNo

Password for the truststore to store to.

--target-truststore-pass="YourTruststorePassword"

--key-aliasYes

Alias used to store the certificate and its private key in the target keystore.

--key-alias="MyKeyAlias"
--ca-aliasYes

Alias used to store the ca certificate in both, the target keystore and truststore.

--ca-alias="MyTrustedCertificateAlias"

...