Installing a SSL Certificate

Configuring breadboard for Amazon Mechanical Turk

1. Setting up a server
2. Installing a SSL Certificate
3. Create an AMT Requester Account
4. Configuring breadboard

In order for Amazon Mechanical Turk workers to view your experiment without security errors you will have to provide them with a secure, https, connection to your instance of breadboard. To install a SSL certificate for use with breadboard, make sure you have configured your server properly with a domain name and then proceed with the following steps:

1. Create a Keystore file
   • Log into your server and run the following command: keytool -genkey -alias [YOUR ALIAS] -keyalg RSA -keystore /home/[YOUR LOGIN NAME]/.keystore -keysize 2048
   • Enter and re-enter a keystore password
   • Answer the following questions as accurately as possible providing your domain name as an answer to "What is your first and last name?"
   • When prompted for the password for the private key alias, press Enter
2. Generate a Certificate Signing Request (CSR)
   • Run the following command to generate a CSR file: keytool -certreq -keyalg RSA -alias [YOUR ALIAS] -file certreq.csr -keystore /home/[YOUR LOGIN NAME]/.keystore
3. Purchase a SSL certificate for your domain name:

• You can purchase a single domain certificate from a provider such as rapidssl.com
• Provide the CSR, certreq.csr, to the signing authority when requested. You may be asked to open the CSR file in a text editor and copy and paste the certificate into a text area.
• Download the certificate in the PKCS #7 (.p7b) format

4. Install the SSL certificate

• Upload the certificate to your server
• Import the certificate into the keystore with the following command: keytool -import -keystore /home/[YOUR LOGIN NAME]/.keystore -alias [YOUR ALIAS] -file [YOUR CERTIFICATE FILE.p7b]
• Type 'yes' and hit enter when prompted

5. Proceed to creating an AMT Requester account