search

igniterealtime / openfire-restAPI-plugin

Allows Openfire administration over a RESTful API.
http://www.igniterealtime.org/projects/openfire/plugin-archive.jsp?plugin=restAPI
Apache License 2.0
19 stars 53 forks source link

Add new Certificate with API #164

Closed ruicaramalho closed 2 years ago

ruicaramalho commented 2 years ago

it would be nice to be able to add a certificate to Openfire using API.

Do you think its possible to do?

Currently we have to run keytool in \Program Files\Openfire\jre\bin


SET keystore="C:\Program Files\Openfire\resources\security\keystore"
SET pfx="C:\Certificates\openfire.pfx"
SET pfxpass=yourpfxpass
SET storepass=changeit

keytool -importkeystore -deststorepass %storepass% -destkeypass %storepass% -destkeystore %keystore% -srckeystore %pfx% -srcstoretype PKCS12 -srcstorepass %pfxpass% -noprompt -v
akrherz commented 2 years ago

Note that the openfire certificate plugin manager exists for the general purpose of automation.

guusdk commented 2 years ago

I'm not sure if it would be wise to use a service that is protected by the same certificates to be used to update those certificates. As @akrherz wrote: the Openfire Certificate Manager plugin is probably a better choice here.

I'm going to close this issue for now. Feel free to re-open this with a compelling argument.