corese server devel

User documentation on corese-server

Deployment on corese.inria.fr

corese.inria.fr service

start and stop

$ ssh corese.inria.fr # Ildap login/passwords 
$ sudo systemctl start corese # Start the server corese.inria.fr
$ sudo systemctl stop corese  # Stop the server corese.inria.fr

Note that as any service, the server is launched as root user which makes the host very vulnerable to any security breach in the jvm or in the corese program.

configuration

• The configuration file for the service can be found at /usr/lib/systemd/system/corese.service
• Note the rights:

$ ls -la /usr/lib/systemd/system/corese.service -rw-r----- 1 root root 417 Apr 25 17:15 /usr/lib/systemd/system/corese.service

Build a certificate for https://corese.inria.fr

Build a private key on corese.inria.fr

As root user:

SERVICE_NAME=corese.inria.fr
openssl req -newkey rsa:4096 -keyout $SERVICE_NAME.key -out $SERVICE_NAME.csr -nodes -sha256 -subj "/CN=$SERVICE_NAME/OU=Wimmics/[email protected]"

It generates:

• a certificate request in corese.inria.fr.csr
• a private key in corese.inria.fr.key

Request a certificate

From https://wiki.inria.fr/support/Demander_un_certificat_serveur , go to https://www.digicert.com/secure/requests/products?guest_key=5mqg57tmprvlw1ff to request a SSL certificate.

Refer to the https://wiki.inria.fr/support/Demander_un_certificat_serveur documentation to fill in the fields. Please include [email protected] as one of the emails address to notify.

Build the keystore