SSL Configuration using Java Keystore - Revision history

Car031 at 14:36, 9 April 2020

2020-04-09T14:36:50Z

← Older revision		Revision as of 14:36, 9 April 2020
Line 4:		Line 4:
	{{Advice\|<b><u>Please be aware that this procedure is not coverded by the standard support contract</u>.</b> <br/>In case you want this matter to be handled professionally, please write to sales@logicaldoc.com for a quote.}}		{{Advice\|<b><u>Please be aware that this procedure is not coverded by the standard support contract</u>.</b> <br/>In case you want this matter to be handled professionally, please write to sales@logicaldoc.com for a quote.}}

	Basically you only have to follows the steps described in the Apache how-to at [https://tomcat.apache.org/tomcat-8.0-doc/ssl-howto.html SSL Configuration HOW-TO]		Basically you only have to follows the steps described in the Apache how-to at [https://tomcat.apache.org/tomcat-9.0-doc/ssl-howto.html SSL Configuration HOW-TO]
	What follows is a re-visioned extract from that how-to		What follows is a re-visioned extract from that how-to

Car031: Car031 moved page SSL Configuration to SSL Configuration using Java Keystore

2020-04-09T14:34:20Z

Car031 moved page SSL Configuration to SSL Configuration using Java Keystore

← Older revision	Revision as of 14:34, 9 April 2020
(No difference)

Car031: /* Edit the Tomcat configuration file */

2017-07-19T09:47:59Z

Edit the Tomcat configuration file

← Older revision		Revision as of 09:47, 19 July 2017
Line 54:		Line 54:
	URIEncoding="UTF-8" server="Undisclosed/8.41" />		URIEncoding="UTF-8" server="Undisclosed/8.41" />

			<small>replace <LDOC_HOME> with the installation path of LogicalDOC</small>

	{{Advice\|LogicalDOC application will be updated from time to time so it is not safe to maintain the keystore inside the tomcat/ folder, please put your keystore inside the conf/ folder of the LogicalDOC installation path.}}		{{Advice\|LogicalDOC application will be updated from time to time so it is not safe to maintain the keystore inside the tomcat/ folder, please put your keystore inside the conf/ folder of the LogicalDOC installation path.}}

Car031 at 09:47, 19 July 2017

2017-07-19T09:47:16Z

← Older revision		Revision as of 09:47, 19 July 2017
Line 54:		Line 54:
	URIEncoding="UTF-8" server="Undisclosed/8.41" />		URIEncoding="UTF-8" server="Undisclosed/8.41" />

			{{Advice\|LogicalDOC application will be updated from time to time so it is not safe to maintain the keystore inside the tomcat/ folder, please put your keystore inside the conf/ folder of the LogicalDOC installation path.}}

	The port attribute (default value is 8443) is the TCP/IP port number on which Tomcat will listen for secure connections. You can change this to any port number you wish.		The port attribute (default value is 8443) is the TCP/IP port number on which Tomcat will listen for secure connections. You can change this to any port number you wish.

Car031 at 09:44, 19 July 2017

2017-07-19T09:44:06Z

← Older revision		Revision as of 09:44, 19 July 2017
Line 1:		Line 1:
	~~==SSL Configuration==~~

	LogicalDOC embeds the Tomcat application server and it can be configured to support the encrypted protocol HTTPS. This is useful when you want to expose the program on the Internet.		LogicalDOC embeds the Tomcat application server and it can be configured to support the encrypted protocol HTTPS. This is useful when you want to expose the program on the Internet.

			{{Advice\|<b><u>Please be aware that this procedure is not coverded by the standard support contract</u>.</b> <br/>In case you want this matter to be handled professionally, please write to sales@logicaldoc.com for a quote.}}

	Basically you only have to follows the steps described in the Apache how-to at [https://tomcat.apache.org/tomcat-8.0-doc/ssl-howto.html SSL Configuration HOW-TO]		Basically you only have to follows the steps described in the Apache how-to at [https://tomcat.apache.org/tomcat-8.0-doc/ssl-howto.html SSL Configuration HOW-TO]

	What follows is a re-visioned extract from that how-to		What follows is a re-visioned extract from that how-to

Car031: /* Edit the Tomcat configuration file */

2017-07-19T09:40:50Z

Edit the Tomcat configuration file

← Older revision		Revision as of 09:40, 19 July 2017
Line 44:		Line 44:

	==Edit the Tomcat configuration file==		==Edit the Tomcat configuration file==
	The final step is to configure your secure socket in the ~~$CATALINA_BASE~~/conf/server.xml file, where ~~$CATALINA_BASE~~ represents the base directory for the ~~Tomcat 6 instance~~. An example <Connector> element for an SSL connector ~~is included in the default server.xml file installed with Tomcat. It will look~~ something like this:		The final step is to configure your secure socket in the <LDOC_HOME>/tomcat/conf/server.xml file, where <LDOC_HOME> represents the base directory for the LogicalDOC installation. An example <Connector> element for an SSL connector looks something like this:

	~~<-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 -->~~		<Connector protocol="org.apache.coyote.http11.Http11NioProtocol"
	<Connector		port="8443" maxThreads="200"
	~~port~~="~~8443" minSpareThreads="5" maxSpareThreads="75~~"
	~~enableLookups~~="~~true" disableUploadTimeout="true"~~
	~~acceptCount="100~~" maxThreads="200"
	scheme="https" secure="true" SSLEnabled="true"		scheme="https" secure="true" SSLEnabled="true"
	keystoreFile="~~${user.home}~~/.keystore" keystorePass="changeit"		keystoreFile="<LDOC_HOME>/conf/keystore"
	clientAuth="false" sslProtocol="TLS"/>		keystorePass="changeit" clientAuth="false" sslProtocol="TLS"
			URIEncoding="UTF-8" server="Undisclosed/8.41" />

	~~You will note that the Connector element itself is commented out by default, so you will need to remove the comment tags around it. Then, you can customize the specified attributes as necessary.~~

	The port attribute (default value is 8443) is the TCP/IP port number on which Tomcat will listen for secure connections. You can change this to any port number you wish.		The port attribute (default value is 8443) is the TCP/IP port number on which Tomcat will listen for secure connections. You can change this to any port number you wish.

Car031: /* Edit the Tomcat configuration file */

2017-07-19T09:37:02Z

Edit the Tomcat configuration file

← Older revision		Revision as of 09:37, 19 July 2017
Line 59:		Line 59:
	The port attribute (default value is 8443) is the TCP/IP port number on which Tomcat will listen for secure connections. You can change this to any port number you wish.		The port attribute (default value is 8443) is the TCP/IP port number on which Tomcat will listen for secure connections. You can change this to any port number you wish.

	If you change the port number here, you should also change the value specified for the redirectPort attribute on the non-SSL connector. This allows Tomcat to automatically redirect users who attempt to access a page with a security constraint specifying that SSL is required~~, as required by the Servlet 2.4 Specification~~.		If you change the port number here, you should also change the value specified for the redirectPort attribute on the non-SSL connector. This allows Tomcat to automatically redirect users who attempt to access a page with a security constraint specifying that SSL is required.

	After completing these configuration changes, you must restart ~~Tomcat~~ as you normally do, ~~and~~ you ~~should be in business. You~~ should be able to access ~~LogicalDOC~~ via SSL. For example, try:		After completing these configuration changes, you must restart LogicalDOC as you normally do, you should be able to access via SSL. For example, try:

	https://localhost:8443		https://localhost:8443

Car031: /* Prepare the certificate Keystore */

2017-07-19T09:35:32Z

Prepare the certificate Keystore

← Older revision		Revision as of 09:35, 19 July 2017
Line 27:		Line 27:
	Windows:<br/>		Windows:<br/>
	%JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA \		%JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA \
	-keystore \~~path\to\my~~\keystore		-keystore <LDOC_HOME>\conf\keystore
	<br/>		<br/>
	Unix:<br/>		Unix:<br/>
	$JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA \		$JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA \
	-keystore /path/~~to/my/keystore~~		-keystore <LDOC_HOME>/conf/keystore

			<small>replace <LDOC_HOME> with the installation path of LogicalDOC</small>

	After executing this command, you will first be prompted for the keystore password. The default password used by Tomcat is "changeit" (all lower case), although you can specify a custom password if you like. You will also need to specify the custom password in the server.xml configuration file, as described later.		After executing this command, you will first be prompted for the keystore password. The default password used by Tomcat is "changeit" (all lower case), although you can specify a custom password if you like. You will also need to specify the custom password in the server.xml configuration file, as described later.

Car031: /* SSL Configuration */

2017-07-19T09:31:14Z

SSL Configuration

← Older revision		Revision as of 09:31, 19 July 2017
Line 2:		Line 2:

	LogicalDOC embeds the Tomcat application server and it can be configured to support the encrypted protocol HTTPS. This is useful when you want to expose the program on the Internet.		LogicalDOC embeds the Tomcat application server and it can be configured to support the encrypted protocol HTTPS. This is useful when you want to expose the program on the Internet.
	Basically you only have to follows the steps described in the Apache how-to at [https://tomcat.apache.org/tomcat-8.0-doc/ssl-howto.html "SSL Configuration HOW-TO"]		Basically you only have to follows the steps described in the Apache how-to at [https://tomcat.apache.org/tomcat-8.0-doc/ssl-howto.html SSL Configuration HOW-TO]

	What follows is a re-visioned extract from that how-to		What follows is a re-visioned extract from that how-to

Car031: /* SSL Configuration */

2017-07-19T09:30:39Z

SSL Configuration

← Older revision		Revision as of 09:30, 19 July 2017
Line 2:		Line 2:

	LogicalDOC embeds the Tomcat application server and it can be configured to support the encrypted protocol HTTPS. This is useful when you want to expose the program on the Internet.		LogicalDOC embeds the Tomcat application server and it can be configured to support the encrypted protocol HTTPS. This is useful when you want to expose the program on the Internet.
	Basically you only have to follows the steps described in the Apache how-to at [https://tomcat.apache.org/tomcat-8.0-doc/ssl-howto.html\|SSL Configuration HOW-TO]		Basically you only have to follows the steps described in the Apache how-to at [https://tomcat.apache.org/tomcat-8.0-doc/ssl-howto.html "SSL Configuration HOW-TO"]

	What follows is a re-visioned extract from that how-to		What follows is a re-visioned extract from that how-to