How to create your SSL for mobile devices

[Former Member]

Hi,

I would like to post the procedure to create the correct SSL for your mobile devices:

- Android SAP Business One App 1.2.0

- iOS SAP Business One App 1.11.1

Use the IP Address instead using the hostname

Once you install OpenSSL run the above command lines

You can find the keystorepassword in the ./Tomcat/conf/server.xml file in the keystorePass attribute

1. set OPENSSL_CONF=c:\openssl-win32\bin\openssl.cfg

2. openssl genrsa -out ServerKey.key 1024

3. openssl req -new -x509 -key ServerKey.key -out myCA.cer -days 3650 -subj /CN="CustomName"

4. openssl genrsa -out ClientKey.key 1024

5. openssl req -new -key ClientKey.key -out CertReq.csr -subj /CN="IP Address"

6. openssl x509 -req -days 3650 -in CertReq.csr -CA myCA.cer -CAkey ServerKey.key -CAcreateserial -out ClientCert.crt

7. openssl pkcs12 -export -inkey ClientKey.key -in ClientCert.crt -out keystore.pkcs12

8. Copy your keystore.pkcs12 file to your B1 Integration Framework (B1i) folder (example ./webapps/B1iXcellerator/keystore.pkcs12) to be sure keytool can read it

9. In the CMD change path folder to the bin of your JAVA installation:

  (example C:\Program Files (x86)\Java\jre1.8.0_40\bin)

10. keytool -delete -alias tomcat -keystore "C:\Program Files (x86)\SAP\SAP Business One Integration\IntegrationServer\Tomcat\webapps\B1iXcellerator\.keystore" -storepass "keystorepassword"

11. keytool -importkeystore -srckeystore "C:\Program Files (x86)\SAP\SAP Business One Integration\IntegrationServer\Tomcat\webapps\B1iXcellerator\keystore.pkcs12" -srcstoretype PKCS12 -destkeystore "C:\Program Files (x86)\SAP\SAP Business One Integration\IntegrationServer\Tomcat\webapps\B1iXcellerator\.keystore" -deststoretype JKS -deststorepassword keystore -srcstorepass keystorepassword

12. keytool -changealias -alias 1 -destalias tomcat -keystore "C:\Program Files (x86)\SAP\SAP Business One Integration\IntegrationServer\Tomcat\webapps\B1iXcellerator\.keystore" -storepass keystorepassword

13. Once you finish this commands restart your B1Integration Service

14. Send your CA.cer to your devices via email and install them