HTTPS setting

It is necessary to store the public key and the private key encryption/to make the server authentication book and the communication data a compound in the key store to which DataSpiderServer refers to do DataSpiderServer and the communication with various components with HTTPS.
Here, the server authentication book and the key are generated by using keytool of Java, and it explains the procedure for storing it in the key store to which DataSpiderServer refers.

Keytool is utility to manage the key and the certificate being offered by Java.
Refer to "keytool" (http://docs.oracle.com/javase/8/docs/technotes/tools/windows/keytool.html) for details concerning keytool.
DataSpiderServer functions as HTTPS server, and can communicate with HTTPS by setting HTTPS with various components.

Generation of key and server authentication book that uses keytool

Location of the executable file of keytool

Generation of server certificate and key

Generation of server certificate and key can be performed by the following procedures.
If you still operate by using the self-signed certificate, perform the procedures in “4. Setting of security" after “1. Generation of key".
  1. Generation of key
    Start the command prompt (shell in case of UNIX/Linux version). Use the keytool -genkeypair command to generate the key. In this command, the pair of the key for DataSpiderServer (public key and relating closed-door key) is generated, and it is stored in the specified key store - optional keystore it. The public key is wrapped with the self-signed certificate.

    Passing the key store to do the HTTPS communication effectively becomes it as follows.
    keytool -genkeypair -keyalg RSA -keystore $DATASPIDER_HOME\server\system\common\classes\.keystore -alias <Alias name>
    Enter keystore password:  changeit
    What is your first and last name?
      [Unknown]:  hostname
    What is the name of your organizational unit?
      [Unknown]:  CS
    What is the name of your organization?
      [Unknown]:  companyname
    What is the name of your City or Locality?
      [Unknown]:  Minato-ku
    What is the name of your State or Province?
      [Unknown]:  Tokyo
    What is the two-letter country code for this unit?
      [Unknown]:  JP
    Is CN=hostname, OU=CS, O=companyname, L=Minato-ku, ST=Tokyo, C=JP correct?
      [no]:  yes

    Enter key password for <Alias name>
            (RETURN if same as keystore password):                    Push RETURN because it does as well as the password of the :* key store.

    When the keytool -genkeypair command is executed, first and last name (CN), organization unit name (OU), organization name (O), city or locality (L), and the input of the item of state or province (ST) and country code (C) are requested.
    Items
    Item Specified information Notes
    Common name(CN) Specify the host name with the machine in which DataSpiderServer is installed. It should agree to the domain name of URL specified by a browser according to CA with it.
    Organization unit name(OU) Specify an arbitrary identification name like the section and the post name, etc. There is a limitation in the character and the number of characters that can be used as specification according to CA by an English name etc.
    Organization name(O) Specify the systematic name. There is a limitation in the character and the number of characters that can be used according to CA.
    City or Locality(L) Specify address information on the organization (municipal district town and village name). There is a limitation in the character and the number of characters that can be used according to CA.
    State or Province(ST) Specify address information on the organization (administrative divisions name). There is a limitation in the character and the number of characters that can be used according to CA.
    Country code(C) Specify the country code of ISO regulations. Japan is "JP".
    Refer to "Online Browsing Platform (OBP)" (https://www.iso.org/obp/ui/#search) for the country code of ISO regulations.

    Effective days of the generated certificate are the 90th. When days any more are set, effective days of the certificate are specified - optional validity it.

    Example:When you specify effective days of the certificate on 180 days
    keytool -genkeypair -keyalg RSA -keystore $DATASPIDER_HOME\server\system\common\classes\.keystore -alias <Alias name> -validity 180

  2. Make certificate signature demand (CSR)
    If you will still operate by using the self-signed certificate, unnecessary to perform this procedure.
    Make certificate signature demand (CSR) by using the keytool -certreq command, and store it in the csr file.

    keytool -certreq -keystore $DATASPIDER_HOME\server\system\common\classes\.keystore -alias <Alias name> -file <CSR file name>.csr

    File (*.csr) generated here is submitted to CA such as VeriSign. CA attests the requester (In off-line usually), and sends back the certificate with the signature that attests requester's public key. According to circumstances, CA might return the chain of the certificate. In the chain of the certificate, each certificate attests the public key of the first signer in the chain.

  3. Import of certificate
    If you will still operate by using the self-signed certificate, unnecessary to perform this procedure.
    Import the certificate (or the chain of the certificate) by using the keytool -importcert command. At this time, it is necessary to do the certificate of CA (Include the certificate to the route CA when you acquire the server authentication book from middle CA) and to be doing the import as a certificate of trusted CA by the key store.


  4. Setting of security
    Put the check in [Enable HTTPS] in [DataSpiderServer settings]-[Security] tab in Control Panel and set the port number and the key store password when HTTPS is communicated.

Confirmation of HTTPS communication

Confirm whether it is possible to access it with HTTPS by starting DataSpiderServer. The confirmation procedure is as follows.
  1. On browser, type “https://<hostname or IP address>:<SSL port number>/” and access DataSpiderServer.

  2. It is displayed on the screen as "DataSpider WebContainer". Here, confirm URL is “https", and the mark of the lock is displayed.
    (For Microsoft Edge, it is displayed on the left side of the address bar.)


  3. When the lock mark is double-clicked, the certificate can be confirmed.


  4. Confirm the following three points if this screen is displayed.
It is confirmed that URL is “https", and the mark of the lock is displayed, and if it is unquestionable, the content of the certificate becomes “HTTPS communicates".

Troubleshooting

The alert message of security is displayed when accessing it from a browser.

The server is inaccessible.

Confirm the following three points if this screen is displayed.

Unable to launch DataSpider Studio for Web

Limitations