# YKK 憑證TSL設定

## 1.測試環境
### 1.1 DNS設定(YKK)
- [x] eiptest.ykkap.com.tw 10.245.0.187

### 1.2 Server SSL啟用設定(Mac)-10.245.0.187
- [x] Tomcat 需設定SSL(8443)
- [x] Keycloak 需設定SSL(9443)

### 1.3 Apache SSL轉址設定(Mac)-10.245.0.187
- [x] https://eiptest.ykkap.com.tw/eip -> https://eiptest.ykkap.com.tw:8443/eip
- [x] https://eiptest.ykkap.com.tw/pro -> https://eiptest.ykkap.com.tw:9020/pro
- [x] https://eiptest.ykkap.com.tw/sso-auth -> https://eiptest.ykkap.com.tw:9010/sso-auth
- [x] [q3file目錄轉址設定](https://docs.google.com/spreadsheets/d/1BSKAreEtbygKfS6h4jAOnayp5H3uUDhdz9ZUgrE-eGw/edit#gid=1653776702)

### 1.4 程式設定SSL(Eric)-10.245.0.187
- [x] EIP
- [x] PRO
- [x] AUTH

## 2.正式環境
### 2.1 DNS設定(YKK)
- [x] eip.ykkap.com.tw 10.245.62.247
- [x] sso.ykkap.com.tw 10.245.62.247

### 2.2 Server SSL啟用設定(Mac)-10.245.62.248
- [x] Tomcat 需設定SSL(8443)
- [x] Keycloak 需設定SSL(443)

### 2.3 Apache SSL 轉址設定(Mac)-10.245.62.247
- [ ] https://eip.ykkap.com.tw/eip -> https://sso.ykkap.com.tw:8443/eip
- [ ] https://eip.ykkap.com.tw/pro -> https://sso.ykkap.com.tw:9020/pro
- [ ] https://eip.ykkap.com.tw/sso-auth -> https://sso.ykkap.com.tw:9010/sso-auth
- [ ] https://sso.ykkap.com.tw -> https://sso.ykkap.com.tw:443/
- [ ] [q3file目錄轉址設定](https://docs.google.com/spreadsheets/d/1BSKAreEtbygKfS6h4jAOnayp5H3uUDhdz9ZUgrE-eGw/edit#gid=1653776702)

### 2.4 設定hostname(Mac)-10.245.62.247
sso.ykkap.com.tw 10.245.62.248

### 2.5 程式設定 SSL(Eric)-10.245.62.248
- [ ] EIP
- [ ] PRO
- [ ] AUTH