Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Info

The private key must be available in a keystore of the "JKS" or "PKCS12" type. More information on key stores can be found here.

Code Block
<!--
      Security configurations
     -->
    <Security>
        <!--
            KeyStore which will be used for encrypting/decrypting passwords
            and other sensitive information.
        -->
        <KeyStore>
            <!-- Keystore file location-->
            <Location>${carbon.home}/repository/resources/security/wso2carbon.jks</Location>
            <!-- Keystore type (JKS/PKCS12 etc.)-->
            <Type>JKS</Type>
            <!-- Keystore password-->
            <Password>wso2carbon</Password>
            <!-- Private Key alias-->
            <KeyAlias>wso2carbon</KeyAlias>
            <!-- Private Key password-->
            <KeyPassword>wso2carbon</KeyPassword>
        </KeyStore>

        <!--
           The directory under which all other KeyStore files will be stored
        -->
        <KeyStoresDir>${carbon.home}/repository/resources/security</KeyStoresDir>
    </Security>

...

Code Block
languagehtml/xml
 <Connector  protocol="org.apache.coyote.http11.Http11NioProtocol"
               port="9763"
               ...
/>

<Connector  protocol="org.apache.coyote.http11.Http11NioProtocol"
               port="9443
               scheme="https"
               ...
/>

Step 4. Changing the OpenID Provider configurations

1. Open the <IS_HOME>/repository/conf/identity.xml file.

2. Change the OpenID provider server URL by changing the corresponding configuration element.

Info

Once this is set, OpenIDs will be generated in the following format: <OpenIDUserPattern>/<User Name>.

For example, https://localhost:9443/openid/bob

Info

Both configurations must have the HTTPS port.

Code Block
<OpenIDServerUrl>https://localhost:9443/openidserver</OpenIDServerUrl>
    <OpenIDUserPattern>https://localhost:9443/openid/</OpenIDUserPattern>
Excerpt
hiddentrue

Instructions to deploy WSO2 Identity Server in production.