Secure Communication on AxTraxPro Web
This article will take you with the steps requires to allow secure communication using SSL to AxTraxPro web-client, this article utilize the OpenSSL Project cryptography, you you already have a valid certification for SSL you can move to step. "To configure your services"
Enabling Secure Communication to AxTraxPro Web Client
Generating an SSL Certificate
To create an SSL certificate for your application on a Windows machine using the command line, you can use OpenSSL to generate a self-signed certificate. This section describes how to generate an SSL certificate and configure AxTraxPro to use it.
To download and install OpenSSL on Windows:
- Download OpenSSL from Shining Light Productions:https://slproweb.com/products/Win32OpenSSL.htm
- Choose the appropriate version (usually Win64 OpenSSL for 64-bit systems)
- Install OpenSSL to a directory of your choice. For example: C:\OpenSSL-Win64
To generate a self-signed SSL certificate:
- Run the Command Prompt as an administrator
- Navigate to OpenSSL Directory.
- Navigate to the OpenSSL bin directory. For example: cd C:\OpenSSL-Win64\bin
To generate a private key and Certificate Signing Request (CSR):
- Run the following command to generate a private key
openssl genrsa -out private.key 2048 - Run the following command to generate a CSR using the private key:
openssl req -new -key private.key -out certificate.csr - Enter the requested organization information. For a self-signed certificate, configure the Common Name to the IP address of your server
To generate the self-signed certificate:
- Run the following command:
openssl x509 -req -days 365 -in certificate.csr -signkey private.key -out certificate.crt
Run the following command:
openssl pkcs12 -export -out certificate.pfx -inkey private.key -in certificate.crt
- Type a new password to create a password for the PFX file.
- Move the generated certificate.pfx file to a directory in your project or a secure location on your server
- Add the SSL certificate path and password to the following configuration files (default paths):
- c:\Program Files (x86)\Rosslare\AxTraxPro WebServer\API\appsettings.json
- c:\Program Files (x86)\Rosslare\AxTraxPro WebServer\Identity\appsettings.json
- c:\Program Files (x86)\Rosslare\AxTraxPro WebServer\API\ClientApp\dist\environments\environment.json
For example:
{
"UseSSL": "true",
"SSLPath": "C:\\path\\to\\certificate.pfx",
"SSLPass": "your_certificate_password"
}
Adding the SSL Certificate to the Trusted Root Certificate Store in Windows
![](https://static.zohocdn.com/zoho-desk-editor/static/images/info.png)
Perform the following procedure to make sure your self-signed certificate is trusted by your Windows system and browsers, enabling secure HTTPS connections without warnings.
To install the certificate in the Windows Certificate Store:
- Open the certificate manager:
- Press Win +R.
- Type mmc.
- Press Enter.
- Add the certificates snap-in:
- Run the MMC console, click File > Add/Remove Snap-in.
- Click Certificates and click Add.
- Click Computer account > Local computer > Finish and click OK.
- Import the certificate:
- In the left pane, expand Certificates > Personal.
- Right-click Personal select All Tasks and click Import.[
- Follow the wizard to import your .pfx file. Use the password you set during the export.
- To add the certificate to the Trusted Root Certification Authorities:
- Copy the certificate:
- Run the MMC console, navigate to Certificates - Local Computer > Personal > Certificates. Locate your newly imported certificate.
- Right-click your certificate, select All Tasks > Export, and follow the wizard to export the certificate as .cer file. Do not export the private key.
- Add the Certificate to Trusted Root:
- In the left pane, expand Certificates > Trusted Root Certification Authorities > Certificates.
- Right-click Certificates, select All Tasks > Import.
- Follow the wizard to import the .cer file you just exported.
To verify the certificate installation:
- In the MMC console verify that your certificate is listed under both Personal and Trusted Root Certification Authorities.
- In your browser navigate to your site. For example: https://10.0.0.10.
- If the set up was correct, the site loads without SSL warnings.
now you can restart the AxTraxPro Webserver Service.
Couldn't find what you are looking for?
Please feel free to contact us:
NORTH AMERICA & CANADA
Toll Free: 1 866 632 1101
Telephone: 1 817 305 0006
EUROPE
Telephone: 972 4 9577 183
LATIN AMERICA
Telephone: 54 11 4001 3104
APAC, MIDDLE EAST AND AFRICA
Telephone: 852 2795 5630
CHINA
Telephone: 86 755 8610 6842
INDIA
Telephone: 91 20 40147830