You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@thrift.apache.org by bu...@apache.org on 2014/05/03 00:31:16 UTC
svn commit: r907830 - in /websites/staging/thrift/trunk/content: ./
sitemap.html test/keys.html
Author: buildbot
Date: Fri May 2 22:31:16 2014
New Revision: 907830
Log:
Staging update by buildbot for thrift
Added:
websites/staging/thrift/trunk/content/test/keys.html
Modified:
websites/staging/thrift/trunk/content/ (props changed)
websites/staging/thrift/trunk/content/sitemap.html
Propchange: websites/staging/thrift/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Fri May 2 22:31:16 2014
@@ -1 +1 @@
-1592070
+1592072
Modified: websites/staging/thrift/trunk/content/sitemap.html
==============================================================================
--- websites/staging/thrift/trunk/content/sitemap.html (original)
+++ websites/staging/thrift/trunk/content/sitemap.html Fri May 2 22:31:16 2014
@@ -112,6 +112,7 @@
<li><a href="/test/ThriftTest">ThriftTest</a></li>
</ul>
</li>
+<li><a href="/test/keys"></a></li>
<li><a href="/test/keys/"></a></li>
<li><a href="/tutorial/">Index of tutorial/</a><ul>
<li><a href="/tutorial/as3">Actionscript 3.0</a></li>
Added: websites/staging/thrift/trunk/content/test/keys.html
==============================================================================
--- websites/staging/thrift/trunk/content/test/keys.html (added)
+++ websites/staging/thrift/trunk/content/test/keys.html Fri May 2 22:31:16 2014
@@ -0,0 +1,203 @@
+<!DOCTYPE html>
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+ <head>
+ <meta content="text/html; charset=utf-8" http-equiv="Content-Type" />
+ <meta content="en-us" http-equiv="Content-Language" />
+ <meta name="viewport" content="width=device-width, initial-scale=1.0">
+
+ <link href="/static/images/favicon.ico" rel="shortcut icon" />
+ <link href="/static/css/style.css" rel="stylesheet" type="text/css" />
+ <link href="/static/css/codehilite.css" rel="stylesheet" type="text/css" />
+ <link href="/static/css/bootstrap.css" media="screen, projection" rel="stylesheet" type="text/css" />
+
+ <script src="/static/js/jquery.min.js"></script>
+ <script src="/static/js/bootstrap-dropdown.js"></script>
+ <script src="/static/js/bootstrap-tab.js"></script>
+
+ <title>Apache Thrift - </title>
+ </head>
+ <body>
+ <div class="navbar">
+ <div class="navbar-inner">
+ <div class="container">
+ <a class="brand" href="/">Apache Thrift ™</a>
+ <div class="nav-collapse">
+ <ul class="nav pull-right">
+ <li>
+ <a href="/download">Download</a>
+ </li>
+ <li>
+ <a href="/docs">Documentation</a>
+ </li>
+ <li>
+ <a href="/developers">Developers</a>
+ </li>
+ <li>
+ <a href="/lib">Libraries</a>
+ </li>
+ <li>
+ <a href="/tutorial">Tutorials</a>
+ </li>
+ <li>
+ <a href="/test">Test Suite</a>
+ </li>
+ <li>
+ <a href="/about">About</a>
+ </li>
+ <li class="dropdown">
+ <a href="#" class="dropdown-toggle" data-toggle="dropdown">
+ Apache <b class="caret"></b>
+ </a>
+ <ul class="dropdown-menu">
+ <li>
+ <a href="http://www.apache.org/" target="_blank">Apache Home</a>
+ </li>
+ <li>
+ <a href="http://www.apache.org/licenses/" target="_blank">Apache License v2.0</a>
+ </li>
+ <li>
+ <a href="http://www.apache.org/foundation/sponsorship.html" target="_blank">Donate</a>
+ </li>
+ <li>
+ <a href="http://www.apache.org/foundation/thanks.html" target="_blank">Thanks</a>
+ </li>
+ <li>
+ <a href="http://www.apache.org/security/" target="_blank">Security</a>
+ </li>
+ </ul>
+ </li>
+ </ul>
+ </div>
+ </div>
+ </div>
+</div>
+
+ <div class="container">
+ <h1 id="test-keys-and-certificates">Test Keys and Certificates</h1>
+<p>This folder is dedicated to test keys and certificates provided in multiple formats.
+Primary use are unit test suites and cross language tests.</p>
+<div class="codehilite"><pre><span class="n">test</span><span class="o">/</span><span class="n">keys</span>
+</pre></div>
+
+
+<p><strong>The files in this directory must never be used on production systems.</strong></p>
+<h2 id="ssl-keys-and-certificates">SSL Keys and Certificates</h2>
+<h2 id="create-certificates">create certificates</h2>
+<p>we use the following parameters for test key and certificate creation</p>
+<div class="codehilite"><pre><span class="n">C</span><span class="p">=</span><span class="n">US</span><span class="p">,</span>
+<span class="n">ST</span><span class="p">=</span><span class="n">Maryland</span><span class="p">,</span>
+<span class="n">L</span><span class="p">=</span><span class="n">Forest</span> <span class="n">Hill</span><span class="p">,</span>
+<span class="n">O</span><span class="p">=</span><span class="n">The</span> <span class="n">Apache</span> <span class="n">Software</span> <span class="n">Foundation</span><span class="p">,</span>
+<span class="n">OU</span><span class="p">=</span><span class="n">Apache</span> <span class="n">Thrift</span><span class="p">,</span>
+<span class="n">CN</span><span class="p">=</span><span class="n">localhost</span><span class="o">/</span><span class="n">emailAddress</span><span class="p">=</span><span class="n">dev</span><span class="p">@</span><span class="n">thrift</span><span class="p">.</span><span class="n">apache</span><span class="p">.</span><span class="n">org</span>
+</pre></div>
+
+
+<h3 id="create-self-signed-server-key-and-certificate">create self-signed server key and certificate</h3>
+<div class="codehilite"><pre><span class="n">openssl</span> <span class="n">req</span> <span class="o">-</span><span class="n">new</span> <span class="o">-</span><span class="n">x509</span> <span class="o">-</span><span class="n">nodes</span> <span class="o">-</span><span class="n">days</span> 3000 <span class="o">-</span><span class="n">out</span> <span class="n">server</span><span class="p">.</span><span class="n">crt</span> <span class="o">-</span><span class="n">keyout</span> <span class="n">server</span><span class="p">.</span><span class="n">key</span>
+<span class="n">openssl</span> <span class="n">x509</span> <span class="o">-</span><span class="n">in</span> <span class="n">server</span><span class="p">.</span><span class="n">crt</span> <span class="o">-</span><span class="n">text</span> <span class="o">></span> <span class="n">CA</span><span class="p">.</span><span class="n">pem</span>
+<span class="nb">cat</span> <span class="n">server</span><span class="p">.</span><span class="n">crt</span> <span class="n">server</span><span class="p">.</span><span class="n">key</span> <span class="o">></span> <span class="n">server</span><span class="p">.</span><span class="n">pem</span>
+</pre></div>
+
+
+<p>Export password is <strong>thrift</strong></p>
+<div class="codehilite"><pre><span class="n">openssl</span> <span class="n">pkcs12</span> <span class="o">-</span><span class="n">export</span> <span class="o">-</span><span class="n">clcerts</span> <span class="o">-</span><span class="n">in</span> <span class="n">server</span><span class="p">.</span><span class="n">crt</span> <span class="o">-</span><span class="n">inkey</span> <span class="n">server</span><span class="p">.</span><span class="n">key</span> <span class="o">-</span><span class="n">out</span> <span class="n">server</span><span class="p">.</span><span class="n">p12</span>
+</pre></div>
+
+
+<h3 id="create-client-key-and-certificate">create client key and certificate</h3>
+<div class="codehilite"><pre><span class="n">openssl</span> <span class="n">genrsa</span> <span class="o">-</span><span class="n">out</span> <span class="n">client</span><span class="p">.</span><span class="n">key</span>
+</pre></div>
+
+
+<p>create a signing request:</p>
+<div class="codehilite"><pre><span class="n">openssl</span> <span class="n">req</span> <span class="o">-</span><span class="n">new</span> <span class="o">-</span><span class="n">key</span> <span class="n">client</span><span class="p">.</span><span class="n">key</span> <span class="o">-</span><span class="n">out</span> <span class="n">client</span><span class="p">.</span><span class="n">csr</span>
+</pre></div>
+
+
+<p>sign the client certificate with the server.key</p>
+<div class="codehilite"><pre><span class="n">openssl</span> <span class="n">x509</span> <span class="o">-</span><span class="n">req</span> <span class="o">-</span><span class="n">days</span> 365 <span class="o">-</span><span class="n">in</span> <span class="n">client</span><span class="p">.</span><span class="n">csr</span> <span class="o">-</span><span class="n">CA</span> <span class="n">CA</span><span class="p">.</span><span class="n">pem</span> <span class="o">-</span><span class="n">CAkey</span> <span class="n">server</span><span class="p">.</span><span class="n">key</span> <span class="o">-</span><span class="n">set_serial</span> 01 <span class="o">-</span><span class="n">out</span> <span class="n">client</span><span class="p">.</span><span class="n">crt</span>
+</pre></div>
+
+
+<p>export certificate in PKCS12 format (Export password is <strong>thrift</strong>)</p>
+<div class="codehilite"><pre><span class="n">openssl</span> <span class="n">pkcs12</span> <span class="o">-</span><span class="n">export</span> <span class="o">-</span><span class="n">clcerts</span> <span class="o">-</span><span class="n">in</span> <span class="n">client</span><span class="p">.</span><span class="n">crt</span> <span class="o">-</span><span class="n">inkey</span> <span class="n">client</span><span class="p">.</span><span class="n">key</span> <span class="o">-</span><span class="n">out</span> <span class="n">client</span><span class="p">.</span><span class="n">p12</span>
+</pre></div>
+
+
+<p>export certificate in PEM format for OpenSSL usage</p>
+<div class="codehilite"><pre><span class="n">openssl</span> <span class="n">pkcs12</span> <span class="o">-</span><span class="n">in</span> <span class="n">client</span><span class="p">.</span><span class="n">p12</span> <span class="o">-</span><span class="n">out</span> <span class="n">client</span><span class="p">.</span><span class="n">pem</span> <span class="o">-</span><span class="n">clcerts</span>
+</pre></div>
+
+
+<h2 id="java-key-and-certificate-import">Java key and certificate import</h2>
+<p>Java Test Environment uses key and trust store password <strong>thrift</strong></p>
+<p>list keystore entries</p>
+<div class="codehilite"><pre><span class="n">keytool</span> <span class="o">-</span><span class="n">list</span> <span class="o">-</span><span class="n">storepass</span> <span class="n">thrift</span> <span class="o">-</span><span class="n">keystore</span> <span class="p">.</span><span class="o">./</span><span class="p">.</span><span class="o">./</span><span class="n">lib</span><span class="o">/</span><span class="n">java</span><span class="o">/</span><span class="n">test</span><span class="o">/</span><span class="p">.</span><span class="n">keystore</span>
+</pre></div>
+
+
+<p>list truststore entries</p>
+<div class="codehilite"><pre><span class="n">keytool</span> <span class="o">-</span><span class="n">list</span> <span class="o">-</span><span class="n">storepass</span> <span class="n">thrift</span> <span class="o">-</span><span class="n">keystore</span> <span class="p">.</span><span class="o">./</span><span class="p">.</span><span class="o">./</span><span class="n">lib</span><span class="o">/</span><span class="n">java</span><span class="o">/</span><span class="n">test</span><span class="o">/</span><span class="p">.</span><span class="n">truststore</span>
+</pre></div>
+
+
+<p>delete an entry</p>
+<div class="codehilite"><pre><span class="n">keytool</span> <span class="o">-</span><span class="n">delete</span> <span class="o">-</span><span class="n">storepass</span> <span class="n">thrift</span> <span class="o">-</span><span class="n">keystore</span> <span class="p">.</span><span class="o">./</span><span class="p">.</span><span class="o">./</span><span class="n">lib</span><span class="o">/</span><span class="n">java</span><span class="o">/</span><span class="n">test</span><span class="o">/</span><span class="p">.</span><span class="n">truststore</span> <span class="o">-</span><span class="n">alias</span> <span class="n">ssltest</span>
+</pre></div>
+
+
+<p>import certificate into truststore</p>
+<div class="codehilite"><pre><span class="n">keytool</span> <span class="o">-</span><span class="n">importcert</span> <span class="o">-</span><span class="n">storepass</span> <span class="n">thrift</span> <span class="o">-</span><span class="n">keystore</span> <span class="p">.</span><span class="o">./</span><span class="p">.</span><span class="o">./</span><span class="n">lib</span><span class="o">/</span><span class="n">java</span><span class="o">/</span><span class="n">test</span><span class="o">/</span><span class="p">.</span><span class="n">truststore</span> <span class="o">-</span><span class="n">alias</span> <span class="n">localhost</span> <span class="o">--</span><span class="n">file</span> <span class="n">server</span><span class="p">.</span><span class="n">crt</span>
+</pre></div>
+
+
+<p>import key into keystore</p>
+<div class="codehilite"><pre><span class="n">keytool</span> <span class="o">-</span><span class="n">importkeystore</span> <span class="o">-</span><span class="n">storepass</span> <span class="n">thrift</span> <span class="o">-</span><span class="n">keystore</span> <span class="p">.</span><span class="o">./</span><span class="p">.</span><span class="o">./</span><span class="n">lib</span><span class="o">/</span><span class="n">java</span><span class="o">/</span><span class="n">test</span><span class="o">/</span><span class="p">.</span><span class="n">keystore</span> <span class="o">-</span><span class="n">srcstoretype</span> <span class="n">pkcs12</span> <span class="o">-</span><span class="n">srckeystore</span> <span class="n">server</span><span class="p">.</span><span class="n">p12</span>
+</pre></div>
+
+
+<h1 id="test-ssl-server-and-clients">Test SSL server and clients</h1>
+<div class="codehilite"><pre><span class="n">openssl</span> <span class="n">s_client</span> <span class="o">-</span><span class="n">connect</span> <span class="n">localhost</span><span class="p">:</span>9090
+<span class="n">openssl</span> <span class="n">s_server</span> <span class="o">-</span><span class="n">accept</span> 9090 <span class="o">-</span><span class="n">www</span>
+</pre></div>
+
+
+<p class='snippet_footer'>
+ This page was generated by Apache Thrift's <strong>source tree docs</strong>:
+ <a href="http://git-wip-us.apache.org/repos/asf?p=thrift.git;a=blob;f=test/keys/README.md;hb=HEAD"</a>test/keys/README.md</a>
+</p>
+ </div>
+ <div class="container">
+ <hr>
+ <footer class="footer">
+ <div class="row">
+ <div class="span3">
+ <h3>Links</h3>
+ <ul class="unstyled">
+ <li><a href="/download">Download</a></li>
+ <li><a href="/developers">Developers</a></li>
+ <li><a href="/tutorial">Tutorials</a></li>
+ </ul>
+ <ul class="unstyled">
+ <li><a href="/sitemap">Sitemap</a></li>
+ </ul>
+ </div>
+ <div class="span3">
+ <h3>Get Involved</h3>
+ <ul class="unstyled">
+ <li><a href="/mailing">Mailing Lists</a></li>
+ <li><a href="http://issues.apache.org/jira/browse/THRIFT">Issue Tracking</a></li>
+ <li><a href="/docs/HowToContribute">How To Contribute</a></li>
+ </ul>
+ </div>
+ <div class="span6">
+ <a href="http://www.apache.org/"><img src="/static/images/favicon.ico" /></a> Copyright 2014 <a href="http://www.apache.org/">Apache Software Foundation</a>. Licensed under the <a href="http://www.apache.org/licenses/">Apache License v2.0</a>. Apache, Apache Thrift, and the Apache feather logo are trademarks of The Apache Software Foundation.
+ </div>
+ </div>
+
+ </footer>
+</div>
+
+ </body>
+</html>