SSL Configuration
If SSL is enabled in the OData provider settings, the OData services can only be accessed via the HTTPS protocol. In order to use SSL, the server requires an X.509 certificate, which is stored in a keystore along with the certificate authority's certificate. To test SSL, you can create what is known as a self-signed certificate. For production use, a certificate from a public certification authority should be used; otherwise, warnings will appear in the browser, or OData clients will reject an SSL connection. The following section describes how to generate a self-signed certificate for testing purposes and save it to a keystore. For more information, particularly on importing trusted certificates, click here.
Creating a Keystore with an SSL Certificate
Open the Command Prompt in Windows or a shell in Linux, and navigate to the bin directory of your Java JDK installation (e.g., /jre/windows/amd64/bin). Then run the following command:
$ keytool -keystore /path/to/keystore.ks -alias odata -genkey -keyalg RSA
Enter keystore password: password
What is your first and last name?
[Unknown]: odata.intrexx.com
What is the name of your organizational unit?
[Unknown]: OData
What is the name of your organization?
[Unknown]: Intrexx GmbH
What is the name of your City or Locality?
[Unknown]:
What is the name of your State or Province?
[Unknown]:
What is the two-letter country code for this unit?
[Unknown]:
Is CN=odata.intrexx.com, OU=OData, O=Intrexx GmbH,
L=Unknown, ST=Unknown, C=Unknown correct?
[no]: yes
Enter key password for <odata>
The program will now prompt you for a password for the keystore and information about the server certificate. When asked for the first and last names, enter the hostname of the OData server as defined in the service endpoint URL.