Highlighted
Super Contributor.
Super Contributor.
1492 views

Webaccess 18 on Windows server


I just upgraded from GW 14.2.2.1 to GW18.0.1 on a test system, including change of server from W2008R2 to W2016. Worked like a dream, all users, PO and messages are present.



But I’m not so sure about Webaccess….
Since my test system is offline (not connected to the internet), it can’t resolve DNS and I get a certificate error, when I access Webaccess on localhost. It looks like Webaccess uses a locally issued certificate (issued to 127.0.0.1) and not my company’s wildcard certificate, which I installed in the IIS management console (the W2016 has the role Web Server installed).
In previous versions of GW (2014 and earlier) Webaccess always found my IIS during the installation, and asked to close and restart it.
This dialogue didn’t come when I installed WA18.



Question:
Does Webaccess still find the certificate in IIS automatically and use it for GroupWise?
Or must I install the certificate in Apache Tomcat 8.5? If so, how do I do this? The certificate is a password protected pfx.file, but I might be able to create .ca-crt, .crt and .key files as well.



Thanks
Jens Jakob Sørensen
Dansk Centralbibliotek, Flensburg
Labels (1)
0 Likes
7 Replies
Highlighted
Micro Focus Expert
Micro Focus Expert

Re: Webaccess 18 on Windows server

Hi Jens,

You need to install the certificate into Tomcat. I'd recommend reading the Tomcat documentation on how to do this. Having said that if I find easy instructions for you I'll share....

Cheers,
Laura Buckley

Views/comments expressed here are entirely my own.
If you find this post helpful, please show your appreciation and click on "Like" below...
0 Likes
Highlighted
Super Contributor.
Super Contributor.

Svar: Re: Webaccess 18 on Windows server


Hi Laura



Thanks for the answer.

Too bad Micro Focus did change this, as it complicates the installation. At least for us, using Windows and never had to deal with Tomcat.



I have searched for information on how to install a certificate in Tomcat, but all the guides seems extremely complicated. I guess they take it for granted you know how Tomcat works and is configured already.



So any installation documentation for dummies are very welcome!



Cheers

Jens Jakob




>>> laurabuckley<laurabuckley@no-mx.forums.microfocus.com> 17-04-2018 08:44 >>>







Hi Jens,




You need to install the certificate into Tomcat. I'd recommend reading

the Tomcat documentation on how to do this. Having said that if I find

easy instructions for you I'll share....




Cheers,







--

Laura Buckley




Views/comments expressed here are entirely my own.




If you find this post helpful and are logged into the web interface,

please show your appreciation and click on the star below...

------------------------------------------------------------------------
laurabuckley's Profile: https://forums.novell.com/member.php?userid=122


View this thread: https://forums.novell.com/showthread.php?t=507810
0 Likes
Highlighted
Micro Focus Expert
Micro Focus Expert

Re: Svar: Re: Webaccess 18 on Windows server

Hi Jens,

Try this [just published] TID: https://www.novell.com/support/kb/doc.php?id=7022859

Cheers,
Laura Buckley

Views/comments expressed here are entirely my own.
If you find this post helpful, please show your appreciation and click on "Like" below...
0 Likes
Highlighted
Super Contributor.
Super Contributor.

Svar: Re: Webaccess 18 on Windows server


Hi Laura



Thanks - this looks easy enough 🙂

It didn't work in the first attempt though, and the TID mentions two key + cer-files, while the server.xml mentions three .pem-files.

I have contacted my certificate issuer in order to learn how to create the needed files.



I'll let you know when I find a solution - or need more help.



Cheers

Jens Jakob





>>> laurabuckley<laurabuckley@no-mx.forums.microfocus.com> 17-04-2018 11:04 >>>







Hi Jens,




Try this [just published] TID:
https://www.novell.com/support/kb/doc.php?id=7022859






Cheers,







--

Laura Buckley




Views/comments expressed here are entirely my own.




If you find this post helpful and are logged into the web interface,

please show your appreciation and click on the star below...

------------------------------------------------------------------------
laurabuckley's Profile: https://forums.novell.com/member.php?userid=122


View this thread: https://forums.novell.com/showthread.php?t=507810
0 Likes
Highlighted
Super Contributor.
Super Contributor.

Svar: Re: Webaccess 18 on Windows server


And now it works - at least on a new test server.

This time I didn't install IIS at all.



In server.xml I did comment this section out

<Connector port="443" protocol="org.apache.coyote.http11.Http11NioProtocol"
maxThreads="150" SSLEnabled="true" scheme="https" secure="true">
<SSLHostConfig>
<Certificate certificateKeystoreFile="conf/.keystore"
type="RSA" />
</SSLHostConfig>
</Connector>




and made this section active

<Connector port="443" protocol="org.apache.coyote.http11.Http11AprProtocol"
maxThreads="150" SSLEnabled="true" >
<UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
<SSLHostConfig>
<Certificate certificateKeyFile="conf/localhost-rsa-key.pem"
certificateFile="conf/localhost-rsa-cert.pem"
certificateChainFile="conf/localhost-rsa-chain.pem"
type="RSA" />
</SSLHostConfig>
</Connector>





I then used

https://www.sslshopper.com/ssl-converter.html

to create a pem-file from my pfx-certificate.

Cut out the key and cert sections, and saved them with the names used by server.xml.

At last I got the latest version the Intermediate Root CA from my certificate issuer and saved that as well.




From the Catalina logfiles I learned my original cert-files failed to load. Apparently some word wrap had gone wrong.




Now I just hope it also works, when I upgrade my live system in a few weeks.



Cheers

Jens Jakob




>>> laurabuckley<laurabuckley@no-mx.forums.microfocus.com> 17-04-2018 11:04 >>>







Hi Jens,




Try this [just published] TID:
https://www.novell.com/support/kb/doc.php?id=7022859






Cheers,







--

Laura Buckley




Views/comments expressed here are entirely my own.




If you find this post helpful and are logged into the web interface,

please show your appreciation and click on the star below...

------------------------------------------------------------------------
laurabuckley's Profile: https://forums.novell.com/member.php?userid=122


View this thread: https://forums.novell.com/showthread.php?t=507810
0 Likes
Highlighted
New Member.

Re: Svar: Re: Webaccess 18 on Windows server

The TID referenced in this thread was VERY helpful! Thanks to all!
0 Likes
Highlighted
Micro Focus Expert
Micro Focus Expert

Re: Svar: Re: Webaccess 18 on Windows server

Hi,

Thank you for the feedback. I will pass your comments on to the person who wrote the TID 🙂

Cheers,
Laura Buckley

Views/comments expressed here are entirely my own.
If you find this post helpful, please show your appreciation and click on "Like" below...
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.