HTTPS

[Ramesh Ponnada]

hi

how to make web application secure using HTTPS, is that aspect related with the servlet programming or Any configuration changes need to be done at the web container. if so please explain the configuration process in JBOSS and Tomcat.

Thanks
Ramesh Ponnada

[Meg Adal]

Here are the steps I followed:

I wanted to use URL https://www.XYZ.com for the website.

1.C:\WINNT\system32\drivers\etc\hosts

Change the entry from 127.0.0.1 localhost
to 127.0.0.1 XYZ.com


2.In Jboss-3.2.5\server\default\deploy\jbossweb-tomcat50.sar\server.xml
Added entry
<Connector port="8443" address="XYZ.com"
maxThreads="100" minSpareThreads="5" maxSpareThreads="15"
scheme="https" secure="true" clientAuth="false"
keystoreFile="${jboss.server.home.dir}/conf/testKey.keystore"
keystorePass="abc123" sslProtocol = "TLS" />

3. Created keystore (here named testKey.keystore with pwd =abc123)and copy it in Jboss-3.2.5\server\default\conf folder

Then accessed the application with URL https://www.XYZ.com

4. Check out this link in regards to creation of keystore
http://java.sun.com/j2se/1.4.2/docs/guide/security/jsse/JSSERefGuide.html#CreateKeystore

I hope that helps.

[norman richards]

The book explains how to do this, as does the JBoss documentation. Those instructions are a bit abbreviated (and old) but it does illustrate the process.