Solution: Installation Guide for SSL certificates
OpenSSL - Opera V5
You will need to download the OpenSSL software from Openssl.org
OpenSSL is the industry standard for transport layer security.
It is open source software, released under BSD license. Please refer to the OpenSSL documentation for licensing and further information.
Creating the environment
Download and install OpenSSL software.
You may install this software on any machine on your network.
It is possible, to install the software on the OPERA server as well, but this is not allowed due to PCI “One Server, One Role” policy.
In case you installed it on the OPERA server, please backup the rootca.crt, the rootca.key file and the “CA” folder somewhere safe and remove the software after you’ve signed the server certificate.
Install OpenSSL on a Microsoft Windows machine
Launch the setup and follow these steps:
Press Next
Read the license agreement and accept it.
Leave unchanged and press Next
Choose Next
Leave unchanged and press Next
Click on Install
Please note: OpenSSL is Open-Source Software and the worlds most used Secure Socket Layer /TLS implementation. It is maintained and developed by a non-profit foundation and is therefore asking for donations.
You don’t need to donate.
Uncheck the Box and press finish.
All the required commands are included in the TXT file attached below.
- Add Request + V5Machine
Create new folder ‘csr’ in Opera Server
🡺 c:/crs
- Open cmd and paste request(Opera Server):
You must replace the highlighted in red.
"CN=NOVOTEL,O=NOVOTEL,C=TN,ST=NOVOTEL,L=Tunis"
Copy the folder ”request.csr’’ from Opera server to your computer
C:/OpenSSL-Win/bin
Create a root certificate
The Root-Certificate is needed to sign the certificate (your computer).
This certificate needs to be deployed on all workstations in the network before you change your actual SSL certificate to a self-signed certificate!
Copy the folder “CA” and the openssl.conf into the C:\OpenSSL-Win\bin
These files are distributed together with this document.
Open a DOS Box and cd to C:\ OpenSSL-Win\bin (your computer)
To generate the root certificate, copy this command into the DOS-Box and change the number of days.
Choose a password (opera321) for the Root-Certificate and note it down somewhere safe. Ps : you won’t see what you type.
Enter the password (twice) and press enter. (opera321)
You’ll need this password every time you sign a certificate.
*Enter Country Name (2Letter Code)
Enter State Name
Enter Locality Name
*Enter Organization Name
*Enter Server-Data (Common Name : The Hostname of the server : Important).
Leave this DOS box open, we’ll need it again later.
Create and sign the certificate
Open The Dos box and paste this command to create a certificate using request.csr file which we’ve created before.
Change server.crt
You’ll need to enter the password (opera321) for the Root-Certificate which we generated in the steps before.
Press y to sign the certificate and y to commit it.
Share certificate (server.crt & rootca.crt) between local machine and server and copy it in:
C:/CSR
Open D:/Micros/Wallets
Add ‘OLD’ to all file’s names
Open D:/Micros/opera/ security
Create new folder “OLD” and paste the old files
Open C:/CSR, copy certificates with V5MACHINE and copy it in D:/MICROS/opera/Security
Open D:/ORA/JDK/jre/lib/security
Make a copy for the file cacerts_org and rename it (cacerts)
Open D:/ORA/12213ohs/wlservr/server/lib
Copy (DemoTrust_org) and rename it DemoTrust
Open DOS box and paste request (OPERA SERVER):
echo 'Y'|CACLS D:\micros\opera\security\cwallet.sso /E /T /C /G "Everyone":F
Open D:/MICROS/opera/security and copy the selected files
Paste files in D:/MICROS/wallets
D:/MICROS/opera/security
Open v5machine to verify valid from and until date
Restart the server