Followed these steps and it works, except it doesn't auto switch from http to https, even tho we have the redirect option specified. Is there something else that needs to be done for auto switching?
On May 6, 2015 6:24 AM, "Hamsagar, Ravindra" <[email protected]> wrote: > > Below points will help to access midtier using https (secure). > > 1. Stop the tomcat - if it is up and running. > 2. Run Keytool Command (search for keytool.exe on box where tomcat running) to create a certificate keystore as mentioned below from command prompt on which tomcat/midtier is running. > >>keytool -genkey -alias tomcat -keyalg RSA -keystore \path\to\my\keystore file > > NOTE: C:\Build\patch\keystore - C:\Build\patch\ is path and keystore is the file name > No need to create keystore file manually > Enter keystore password: changeit (you can give any password) > Re-enter new password: changeit (same password to be given here) > > 3. Uncomment the "SSL HTTP/1.1 Connector" entry in $CATALINA_HOME/conf/server.xml and tweak as necessary. > > <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true" > maxThreads="150" scheme="https" secure="true" > clientAuth="false" sslProtocol="TLS" keystoreFile="C:\Build\patch\keystore" KeyAlias="tomcat" KeystorePass="changeit"/> > > 4. Restart tomcat > 5. Now access midtier with secured URL https://<midtiername>:8443 > > > -----Original Message----- > From: Action Request System discussion list(ARSList) [mailto: [email protected]] On Behalf Of John Baker > Sent: 06 May 2015 00:26 > To: [email protected] > Subject: Tomcat issue > > Hello > > You need to generate SSL certificates or use a reverse proxy where SSL is terminated (the common option in enterprises). Lots of tutorials on both in Google. > > > John > > _______________________________________________________________________________ > UNSUBSCRIBE or access ARSlist Archives at www.arslist.org "Where the Answers Are, and have been for 20 years" > > _______________________________________________________________________________ > UNSUBSCRIBE or access ARSlist Archives at www.arslist.org > "Where the Answers Are, and have been for 20 years" _______________________________________________________________________________ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org "Where the Answers Are, and have been for 20 years"
