Setting up SSL/HTTPS - Revision history

Tvi: 9 revisions imported

2021-12-10T10:55:30Z

9 revisions imported

← Older revision

Revision as of 12:55, 10 December 2021

old>Admin: /* Configuring SSL */

2021-03-05T11:23:53Z

Configuring SSL

← Older revision		Revision as of 13:23, 5 March 2021
Line 1:		Line 1:
			== Aquiring an SSL certificate ==
			Sites such as [ssl.com] can provide single domain easy and inexpensively.

			# Buy domain
			# Enter domain name
			# Generate CSR
			# Download private key (.txt)
			# Upload validation file
			# Download certificate (.cer)
			# Copy certificate and private key to server
			# Generate pfx file

			openssl pkcs12 -export -out domainname.pfx -inkey domainname_key.key -in domainname.crt

	== Configuring SSL ==		== Configuring SSL ==
	As a minimum SSL has to be enabled in the application server (JBoss,Tomcat etc).		As a minimum SSL has to be enabled in the application server (JBoss,Tomcat etc).

old>Admin at 12:17, 11 February 2013

2013-02-11T12:17:46Z

← Older revision		Revision as of 14:17, 11 February 2013
Line 3:		Line 3:

	Optionally TempusServa SSL policies can be tweaked to enforce certain behaviours.		Optionally TempusServa SSL policies can be tweaked to enforce certain behaviours.


	=== Configuring SSL i web application ===		=== Configuring SSL i web application ===

old>Admin at 12:17, 11 February 2013

2013-02-11T12:17:28Z

← Older revision		Revision as of 14:17, 11 February 2013
Line 1:		Line 1:
	=== Configuring SSL ===		== Configuring SSL ==
	As a minimum SSL has to be enabled in the application server (JBoss,Tomcat etc).		As a minimum SSL has to be enabled in the application server (JBoss,Tomcat etc).

old>Admin at 12:15, 11 February 2013

2013-02-11T12:15:29Z

← Older revision		Revision as of 14:15, 11 February 2013
Line 7:		Line 7:
	=== Configuring SSL i web application ===		=== Configuring SSL i web application ===
	Checklist for Tomcat 6 or 7		Checklist for Tomcat 6 or 7
	# Import certifcates to keystore		# Import certifcates to keystore or copy from another server
	# Uncomment connector code in conf/server.xml		# Uncomment connector code in conf/server.xml
	# Set keystore reference and password		# Set keystore reference and password
	# Reboot server		# Reboot server

			In order to ensure high level encryption, consider enabling the following options
			<blockquote><p>ciphers="SSL_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA"</p></blockquote>

	=== Configuring SSL i Tempus Serva ===		=== Configuring SSL i Tempus Serva ===

old>Admin at 12:12, 11 February 2013

2013-02-11T12:12:20Z

← Older revision		Revision as of 14:12, 11 February 2013
Line 18:		Line 18:
	* Require SSL for all othe pages: '''securitySslLogin'''		* Require SSL for all othe pages: '''securitySslLogin'''

	Note that SSL can not be actively prevented.		Note that SSL can not be actively prevented. If such behavior is required, the only option is to disable this at the web application level.

	Finally the SSL connector port can be changed if set to nondefault values: '''applicationlPortSSL'''		Finally the SSL connector port can be changed if set to nondefault values: '''applicationlPortSSL'''

old>Admin at 11:57, 11 February 2013

2013-02-11T11:57:56Z

← Older revision		Revision as of 13:57, 11 February 2013
Line 1:		Line 1:
	=== Configuring SSL ===		=== Configuring SSL ===
	As a minimum SSL has to be enabled in the application server (JBoss,Tomcat etc).		As a minimum SSL has to be enabled in the application server (JBoss,Tomcat etc).

	Optionally TempusServa SSL policies can be tweaked to enforce certain behaviours.		Optionally TempusServa SSL policies can be tweaked to enforce certain behaviours.

old>Admin at 11:57, 11 February 2013

2013-02-11T11:57:37Z

← Older revision		Revision as of 13:57, 11 February 2013
Line 1:		Line 1:

	=== Configuring SSL ===		=== Configuring SSL ===
	As a minimum SSL has to be enabled in the application server (JBoss,Tomcat etc).		As a minimum SSL has to be enabled in the application server (JBoss,Tomcat etc).
Line 14:		Line 13:
	=== Configuring SSL i Tempus Serva ===		=== Configuring SSL i Tempus Serva ===

	Two options exist		Two configurations options exist
	* Require SSL for login actions: '''securitySslPages'''		* Require SSL for login actions: '''securitySslPages'''
	* Require SSL for all othe pages: '''securitySslLogin'''		* Require SSL for all othe pages: '''securitySslLogin'''

old>Admin: /* Configuring SSL i Tempus Serva */

2013-02-11T11:57:20Z

Configuring SSL i Tempus Serva

← Older revision		Revision as of 13:57, 11 February 2013
Line 13:		Line 13:

	=== Configuring SSL i Tempus Serva ===		=== Configuring SSL i Tempus Serva ===
	-

			Two options exist
			* Require SSL for login actions: '''securitySslPages'''
			* Require SSL for all othe pages: '''securitySslLogin'''

			Note that SSL can not be actively prevented.

			Finally the SSL connector port can be changed if set to nondefault values: '''applicationlPortSSL'''

	== Problems with wrappers==		== Problems with wrappers==

old>Admin: Created page with ' === Configuring SSL === As a minimum SSL has to be enabled in the application server (JBoss,Tomcat etc). Optionally TempusServa SSL policies can be tweaked to enforce certain be…'

2013-02-11T11:53:29Z

Created page with ' === Configuring SSL === As a minimum SSL has to be enabled in the application server (JBoss,Tomcat etc). Optionally TempusServa SSL policies can be tweaked to enforce certain be…'

New page

=== Configuring SSL ===
As a minimum SSL has to be enabled in the application server (JBoss,Tomcat etc).
Optionally TempusServa SSL policies can be tweaked to enforce certain behaviours.

=== Configuring SSL i web application ===
Checklist for Tomcat 6 or 7
# Import certifcates to keystore
# Uncomment connector code in conf/server.xml
# Set keystore reference and password
# Reboot server

=== Configuring SSL i Tempus Serva ===
-

== Problems with wrappers==
The usage of wrappers can result in SSL warnings.

If your solution is depending on the use of Wrappers, please tjeck the following
* All style, script and image references are made with HTTPS
* No referenced stylesheets depends on images using HTTP

If the wrapper cannot be transformed from HTTP to HTTPS, referenced ressources should be copied to the server
* Stylesheets copied to TS stylesheet
* Images downloaded and copied to the media library

After changes are made remmeber to flush caches: Both Chrome and IE sometimes caches longer than expected.