-
Type: Improvement
-
Status: Resolved
-
Priority: Minor
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: 5.5
-
Component/s: Configuration
Create an HTTPS template for configuring Tomcat to directly listen to HTTPS, instead of relying on an HTTP server.
In conf/server.xml and server.xml.nx
Put between comments the sections:
<Connector port="${nuxeo.server.http.port}" protocol="HTTP/1.1" address="${nuxeo.bind.address}"
connectionTimeout="20000" redirectPort="${nuxeo.server.https.port}" />
<Connector port="${nuxeo.server.ajp.port}" protocol="AJP/1.3" address="${nuxeo.bind.address}"
redirectPort="${nuxeo.server.https.port}" />
Remove the comments and add certificate info to the section:
<Connector port="${nuxeo.server.https.port}" protocol="HTTP/1.1" SSLEnabled="true"
address="${nuxeo.bind.address}" maxThreads="150" scheme="https" secure="true"
keystoreFile="/path/to/keystore" keystorePass="password" clientAuth="false" sslProtocol="TLS" />
Set default values for nuxeo.url (https://localhost:8443/nuxeo), nuxeo.loopback.url and opensocial.gadgets.port in nuxeo.defaults