SSL Configuration using Certificate - Revision history

Blucecio: /* Install PFX certificates */

2024-02-27T15:14:29Z

Install PFX certificates

← Older revision		Revision as of 15:14, 27 February 2024
Line 79:		Line 79:
	</source>		</source>
	Save the file and restart LogicalDOC service/daemon.		Save the file and restart LogicalDOC service/daemon.

	Now you can access LogicalDOC pointing your browser to https://YourServerDomain:8443 (ofc replace 'YourServerDomain' with the actual domain of your server).		Now you can access LogicalDOC pointing your browser to https://YourServerDomain:8443 (ofc replace 'YourServerDomain' with the actual domain of your server).

	This procedure works for both certificate files with the .pfx extension and those with the .p12 extension		This procedure works for both certificate files with the .pfx extension and those with the .p12 extension

Blucecio: /* Install PFX certificates */

2024-02-27T15:14:20Z

Install PFX certificates

← Older revision		Revision as of 15:14, 27 February 2024
Line 78:		Line 78:
	/>		/>
	</source>		</source>
	Save the file and access ~~the address via~~ browser https://YourServerDomain:8443 ~~by replacing~~ 'YourServerDomain' with		Save the file and restart LogicalDOC service/daemon.
	the actual domain of your server.		Now you can access LogicalDOC pointing your browser to https://YourServerDomain:8443 (ofc replace 'YourServerDomain' with the actual domain of your server).

	This procedure works for both certificate files with the .pfx extension and those with the .p12 extension		This procedure works for both certificate files with the .pfx extension and those with the .p12 extension

Blucecio: /* Install PFX certificates */

2024-02-27T15:12:04Z

Install PFX certificates

← Older revision		Revision as of 15:12, 27 February 2024
Line 60:		Line 60:

	== Install PFX certificates ==		== Install PFX certificates ==

			As regards certificates with the .pfx or .p12 extension, there is no need to convert them, because they are certificate archives already supported by Tomcat.

	Modify the value of the Connector attribute in the server.xml file to the following:		Modify the value of the Connector attribute in the server.xml file to the following:
Line 76:		Line 78:
	/>		/>
	</source>		</source>
			Save the file and access the address via browser https://YourServerDomain:8443 by replacing 'YourServerDomain' with
			the actual domain of your server.

	This procedure works for both certificate files with the .pfx extension and those with the .p12 extension		This procedure works for both certificate files with the .pfx extension and those with the .p12 extension

Blucecio: /* Install PFX certificates */

2024-02-27T15:07:55Z

Install PFX certificates

← Older revision		Revision as of 15:07, 27 February 2024
Line 76:		Line 76:
	/>		/>
	</source>		</source>

			This procedure works for both certificate files with the .pfx extension and those with the .p12 extension

Blucecio: /* Install PFX certificates */

2024-02-27T15:06:31Z

Install PFX certificates

← Older revision		Revision as of 15:06, 27 February 2024
Line 63:		Line 63:
	Modify the value of the Connector attribute in the server.xml file to the following:		Modify the value of the Connector attribute in the server.xml file to the following:

	<source lang="~~text~~">		<source lang="xml">
	<Connector protocol="org.apache.coyote.http11.Http11NioProtocol"		<Connector protocol="org.apache.coyote.http11.Http11NioProtocol"
	port="8443" maxThreads="200"		port="8443" maxThreads="200"
Line 69:		Line 69:
	maxHttpHeaderSize="16384"		maxHttpHeaderSize="16384"
	scheme="https" secure="true" SSLEnabled="true"		scheme="https" secure="true" SSLEnabled="true"
	clientAuth="false"		clientAuth="false"
	sslProtocol="TLSv1.1+TLSv1.2+TLSv1.3"		sslProtocol="TLSv1.1+TLSv1.2+TLSv1.3"
	keystoreFile="${catalina.home}/../conf/mycert.pfx" # Path of the certificate file		keystoreFile="${catalina.home}/../conf/mycert.pfx" # Path of the certificate file
	keystoreType="PKCS12"		keystoreType="PKCS12"
	keystorePass="certpasswd" # Replace the value with the password of your certificate		keystorePass="certpasswd" # Replace the value with the password of your certificate
	/>		/>
	</source>		</source>

Blucecio: /* Install PFX certificates */

2024-02-27T15:05:38Z

Install PFX certificates

← Older revision		Revision as of 15:05, 27 February 2024
Line 63:		Line 63:
	Modify the value of the Connector attribute in the server.xml file to the following:		Modify the value of the Connector attribute in the server.xml file to the following:

	<source lang="~~xml~~">		<source lang="text">
	<Connector protocol="org.apache.coyote.http11.Http11NioProtocol"		<Connector protocol="org.apache.coyote.http11.Http11NioProtocol"
	port="8443" maxThreads="200"		port="8443" maxThreads="200"

Blucecio: /* Use directly a .P12 file */

2024-02-27T15:05:08Z

Use directly a .P12 file

← Older revision		Revision as of 15:05, 27 February 2024
Line 59:		Line 59:
	and you should see the usual login page.		and you should see the usual login page.

	== ~~Use directly a~~ .~~P12~~ file ==		== Install PFX certificates ==

			Modify the value of the Connector attribute in the server.xml file to the following:

	<source lang="xml">		<source lang="xml">
	<Connector protocol="org.apache.coyote.http11.Http11NioProtocol"		<Connector protocol="org.apache.coyote.http11.Http11NioProtocol"
Line 66:		Line 69:
	maxHttpHeaderSize="16384"		maxHttpHeaderSize="16384"
	scheme="https" secure="true" SSLEnabled="true"		scheme="https" secure="true" SSLEnabled="true"
	clientAuth="false"		clientAuth="false"
	sslProtocol="TLSv1.1+TLSv1.2+TLSv1.3"		sslProtocol="TLSv1.1+TLSv1.2+TLSv1.3"
	keystoreFile="${catalina.home}/../conf/mycert.~~p12~~"		keystoreFile="${catalina.home}/../conf/mycert.pfx" # Path of the certificate file
	keystoreType="PKCS12"		keystoreType="PKCS12"
	keystorePass="certpasswd" />		keystorePass="certpasswd" # Replace the value with the password of your certificate
			/>
	</source>		</source>

Blucecio: /* Preparing the certificate (skip this step if you already have your own SSL certificate) */

2024-02-27T14:57:31Z

Preparing the certificate (skip this step if you already have your own SSL certificate)

← Older revision		Revision as of 14:57, 27 February 2024
Line 8:		Line 8:
	What follows is a re-visioned extract from that how-to		What follows is a re-visioned extract from that how-to

	== Preparing the ~~certificate (~~skip this step if you already have your own SSL certificate~~) ==~~		== Preparing the certificates ==
			Note: skip this step if you already have your own SSL certificate

	To install and configure SSL support on Tomcat, you need the following things:		To install and configure SSL support on Tomcat, you need the following things:
	* The file of your server certificate (the format must be PEM-encoded)		* The file of your server certificate (the format must be PEM-encoded)

Blucecio at 14:56, 27 February 2024

2024-02-27T14:56:50Z

← Older revision		Revision as of 14:56, 27 February 2024
Line 1:		Line 1:
			{{TOCright}} __TOC__

	LogicalDOC embeds the Tomcat application server and it can be configured to support the encrypted protocol HTTPS. This is useful when you want to expose the program on the Internet.		LogicalDOC embeds the Tomcat application server and it can be configured to support the encrypted protocol HTTPS. This is useful when you want to expose the program on the Internet.

Blucecio: /* Edit the Tomcat configuration file */

2024-02-27T14:55:58Z

Edit the Tomcat configuration file

← Older revision		Revision as of 14:55, 27 February 2024
Line 29:		Line 29:
	The final step is to configure your secure socket in the <LDOC_HOME>/tomcat/conf/server.xml file, where <LDOC_HOME> represents the base directory for the LogicalDOC installation. An example <Connector> element for an SSL connector looks something like this:		The final step is to configure your secure socket in the <LDOC_HOME>/tomcat/conf/server.xml file, where <LDOC_HOME> represents the base directory for the LogicalDOC installation. An example <Connector> element for an SSL connector looks something like this:

			<source lang="xml">
	<Connector protocol="org.apache.coyote.http11.Http11NioProtocol"		<Connector protocol="org.apache.coyote.http11.Http11NioProtocol"
	port="8443" maxThreads="200"		port="8443" maxThreads="200"
Line 39:		Line 40:
	</SSLHostConfig>		</SSLHostConfig>
	</Connector>		</Connector>
			</source>

	<small>replace <LDOC_HOME> with the installation path of LogicalDOC</small>		<small>replace <LDOC_HOME> with the installation path of LogicalDOC</small>