Configure WSO2 EMM

I am trying to configure WSO2 EMM V2.0.1. I was able to configure it on my real server and follow all the instructions given here by WSO2 Getting Started until I got to Configuring Android BKS I configured all the settings provided and mine https, which works fine. So, I moved on to adding the user, the first thing I noticed was that it Email Configurationdidn’t work. Thus, I cannot add users with email. Then I noticed that I can’t even register users. I tried to check the user login on a mobile device using username: admin, password: password, and I get this error Trust anchor for certification path not foundwhen I use the emulator for testing, and then when I use a real device, I get this one No peer certificate. This is my urlSELF URL EMM . After some debugging, I noticed that he calls this URL and passes this parameter {"applicationType":"device","callbackUrl":"","clientName":"355972050729590","grantType":"password refresh_token","owner":"admin","tokenScope":"production"}, but does not add the user to Android. I have an instance of WSO2 v1 that has been mistakenly deleted. But I need to get it back. And I looked at the configuration here.

 public static boolean DEBUG_MODE_ENABLED = false;
  public static boolean LOCAL_NOTIFICATIONS_ENABLED = true;
  public static boolean GCM_ENABLED = false;

  public static String SERVER_IP = "";

  public static String SERVER_PORT = "9443";
  public static String SERVER_PROTOCOL = "https://";
  public static String API_VERSION = "1.0.0";

  public static String SERVER_APP_ENDPOINT = "/EMM/api/";

  public static String OAUTH_ENDPOINT = "/oauth2/token";
  public static String SENDER_ID_ENDPOINT = "devices/sender_id/";
  public static String IS_REGISTERED_ENDPOINT = "devices/isregistered/";
  public static String LICENSE_ENDPOINT = "devices/license/";
  public static String REGISTER_ENDPOINT = "devices/register/";
  public static String UNREGISTER_ENDPOINT = "devices/unregister/";
  public static String NOTIFICATION_ENDPOINT = "notifications/pendingOperations/";

  public static String SERVER_URL = SERVER_PROTOCOL + SERVER_IP + ":" + SERVER_PORT + SERVER_APP_ENDPOINT; <-- There nothing like this in the Constants.java class

  public static final String TRUSTSTORE_PASSWORD = "";
  public static final String EULA_TITLE = "POLICY AGREEMENT";

Not everyone is in the Constant.java class and many of them are not used. If the problem is HTTPS, I would like to switch to http. I can’t switch, I get it anyway Timeout error. And I tried both 40.68.228.207:9443, which for HTTPS and 40.68.228.207:9763, which is for HTTP, both give me no partner certificates. HELP ME .

You said change your email address here

Customize the email that is being sent out by navigating to the notification-messages.xml file, which is in the <EMM_HOME>/repository/conf directory., resulting in where notification-messages.xml does not exist in the entire directory specified

*

-A INPUT -i lo -j ACCEPT -A INPUT -d 127.0.0.0/8 -j REJECT -A INPUT -m state -state ESTABLISHED, RELATED -j ACCEPT -A OUTPUT -j ACCEPT

HTTP HTTPS

-A INPUT -p tcp --dport 80 -j ACCEPT -A INPUT -p tcp --dport 8080 -j -A INPUT -p tcp -dport 27017 -j -A INPUT -p tcp -dport 1410 -j -A INPUT -p tcp -dport 1450 -j ACCEPT -A INPUT -p tcp -dport 9443 -j -A INPUT -p tcp -dport 9763 -j -A INPUT -p tcp -dport 443 -j ACCEPT -A INPUT -p tcp -dport 1400 -j ACCEPT

-A INPUT -s -p tcp -destination-port 27017 -m state -state NEW, ESTABLISHED -j ACCEPT

-A OUTPUT -d -p tcp - - 27017 -m -state ESTABLISHED -j ACCEPT

SSH

-A INPUT -p tcp -m state -state NEW -dport 22 -j ACCEPT

-A INPUT -p icmp -j ACCEPT

iptables

-A INPUT -m limit -limit 5/min -j LOG -log-prefix "iptables denied:" --log-level 7

, IP 15 80 60

-A INPUT -p tcp -dport 80 -i eth0 -m state -state NEW -m recent -set -A INPUT -p tcp -dport 80 -i eth0 -m state -state NEW -m recent -update -seconds 60 -hitcount 15 -j D $

- ,

-A INPUT -j DROP -A FORWARD -j DROP

COMMIT

+4
1

IOS, . ssl, , .

.pem. openssl x509 -in -out :

openssl x509 -in rootcert.crt -out  root.pem

openssl x509 -in intermidiatecert.crt -out  inter.pem

.

cat <CERTIFCATE 1> <CERTIFICATE 2> ... >> <CERTIFICATE CHAIN>

:

cat root.pem inter.pem >> clientcertchain.pem

SSL PKCS12 "wso2carbon" .

openssl pkcs12 -export -out <KEYSTORE>.p12 -inkey <RSA_key>.key -in ia.crt -CAfile ca_cert.pem -name "<alias>"

:

openssl pkcs12 -export -out KEYSTORE.p12 -inkey ia.key -in ia.crt -CA file clientcertchain.pem -name "wso2carbon"

p12 wso2carbon.jks client-truststore.jks /repository/resources/security. keytool -importkeystore -srckeystore.p12 -srcstoretype PKCS12 -destkeystore :

keytool -importkeystore -srckeystore KEYSTORE.p12 -srcstoretype PKCS12 -destkeystore wso2carbon.jks 
keytool -importkeystore -srckeystore KEYSTORE.p12 -srcstoretype PKCS12 -destkeystore client-truststore.jks 

:
wso2carbon. , wso2carbon, yes.


0

All Articles