Openfire SSL instructions

The instructions for openfire ssl are incomplete. I had my certificate signed by a CA and following the instructions in the openfire ssl guide, I had difficulty. After you follow the steps down to the part about the truststore, you need to follow these instructions, replacing the filename, alias and password with your own. Once you import the signed cert into the truststore and restart openfire and go to the server certificates page, you will see that openfire now reports your cert as signed and all will be great. You can then require ssl communication and if you view sessions, it will show that they are secure. $ keytool -export -alias example.com -file mycert.cer -keystore keystore Enter keystore password: changit

Certificate stored in file mycert.cer

Then we need to create the truststore if it does not exist and import the certificate into the trueststore:

$ keytool -import -alias example.com -file mycert.cer -keystore truststore

Enter keystore password: opensource Owner: CN=Unknown, OU=Unknown, O=Unknown, L=Unknown, ST=Unknown, C=Unknown Issuer: CN=Unknown, OU=Unknown, O=Unknown, L=Unknown, ST=Unknown, C=Unknown Serial number: 43bff927

Valid from: Sat Jan 07 18:23:51 CET 2006 until: Fri Apr 07 19:23:51 CEST 2006 Certificate fingerprints: MD5: CF:DC:71:A8:F4:EA:8F:5A:E9:94:E3:E6:5B:A9:C8:F3 SHA1: 0E:AD:F3:D6:41:5E:F6:84:9A:D1:54:3D:DE:A9:B2:01:28:F6:7C:26 Trust this certificate? [no]: yes

Certificate was added to keystore