Today is Tuesday, 17th January 2017

Archive for the ‘Glassfish’ Category

SOAP Message Logging in GlassFish v2 and v3

I found a very nifty feature of GlassFish. You can configure GlassFish to log the contents of a SOAP request and response. I have found this to be very useful during development/debugging of Web Services. There is a different configuration parameter depending on which version of GlassFish you are using.

GlassFish 3

This configuration is very simple. Edit your domain config file, in my case, domains/domain1/config/domain.xml. Add the following entry in the java-config section:

<!-- Setup SOAP messaging logging -->

GlassFish 2

A similar config is available for GlassFish 2. Edit your domain config file, in my case, domains/domain1/config/domain.xml. Add the following entry in the java-config section:

<!-- Setup SOAP messaging logging -->

I hope you find this tip useful 🙂


Install GlassFish 4 as a Windows Service

To install GlassFish 4 as a Window Service, you can use the create-service command. Follow these steps to setup the service:

Open an MS-DOS window (Run As Administrator)

cd {your_glassfish_home}\glassfish\bin
asadmin create-service --name domain1

This will create the service. You can verify this in the Windows Services control panel. By default, the service display name is domain1 GlassFish Server.

If you would like to change the display name of the service, then you can execute the following command. Be sure to put a space between DisplayName= and "GlassFish 4"

sc config domain1 DisplayName= "GlassFish 4"

If you no longer need the Windows service, you can delete the service with this command.

sc delete domain1

Also, you should delete all files in cd \glassfish\domains\domain1\bin

Additional documentation on the create-service command is available here.


Configure SSL on GlassFish with GoDaddy Certificate: GlassFish 2 and GlassFish 3

This page describes the steps for setting up SSL on a GlassFish server. The SSL Certificate used is a GoDaddy certificate. If you are using a different CA then the steps should be similar.

These steps apply to GlassFish 2 and GlassFish 3.

Preliminary Steps:

  • Backup your directory: <glassfish_install>\domains\domain1\config
  • Stop the GlassFish server

The following fields will change based on your installation. For this example, we are using:

  • CSR file name: mywebsite.csr
  • dname: information on about your server install, where cn=<fully qualified domain name>
  • certificate file:
  • keystore file: mycompanystore.jks

Note: These variables will be displayed in red bold in the following steps. Be sure to change the values based on your server environment.


Open MS-DOS window (Run As Administrator)

cd <glassfish_install>\domains\domain1\config

Step 1:  Generate key

keytool -genkey -dname ", ou=My Company Name, o=My Company Name, L=Philadelphia, ST=PA, C=US" -keyalg RSA -keysize 2048 -alias mykey -keypass changeit -keystore mycompanystore.jks -storepass changeit -validity 365

Step 2:  Generate CSR file

keytool -certreq -alias mykey -keypass changeit -keystore mycompanystore.jks -storepass changeit -file mywebsite.csr

Email the file “mywebsite.csr” to the Certificate Authority (CA). The CA will eventually send you an email to download the certificates. You’ll use those in step 3.

Step 3:  Download the GoDaddy certificate zip file

The zip file includes:

  • gd_bundle.crt

Unzip the zip file. Copy these files to <glassfish_install>\domains\domain1\config

Import Go Daddy root certificate

keytool -import -trustcacerts -alias root -file gd_bundle.crt -keystore mycompanystore.jks -keypass changeit -storepass changeit

Step 4: Import your domain certificate

keytool -import -trustcacerts -alias mykey -file -keystore mycompanystore.jks -keypass changeit -storepass changeit

Step 5:  Change the server config to point to the new mycompanystore.jks file.

Edit the file cd <glassfish_install>\domains\domain1\config\domain.xml


Step 6:  Change the server config to use new SSL nickname.

Perform a global replace of “s1as” with “mykey”. “mykey” is the alias you used in the previous steps.
<ssl cert-nickname="s1as" client-auth-enabled="false" ssl2-enabled="false" ssl3-enabled="true" tls-enabled="true" tls-rollback-enabled="true"/>

Step 7: Restart the GlassFish server

Step 8: Visit the SSL URL in your browser


By default, GlassFish SSL port is on 8181. If you’d like, you can change it to port 443 which is the browser default for the secure https:// protocol.