Highlighted
Outstanding Contributor.
Outstanding Contributor.
1062 views

Secure Connection between User Browser and Webtier

Jump to solution

Hi Experts,

 

Is there any one know how to configure https connection between SM users using web browsers and the SM webtier as I enables the secure login parameter in web.xml as follows:

*******************************************************

<context-param>
<param-name>secureLogin</param-name>
<param-value>true</param-value>
</context-param>
<context-param>
<param-name>sslPort</param-name>
<param-value>8443</param-value>
</context-param>

*******************************************************

 

And in the Apache web server, I added the following in the server.xml

*******************************************************

 

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" />

*******************************************************

 

but still it not working when trying to load the web client using https and 8443 port,

 

Is there anything missing ?

 

Regards,

Mahmoud Al-Abgy

0 Likes
1 Solution

Accepted Solutions
Highlighted
Outstanding Contributor.
Outstanding Contributor.
Hi
To configure a secure connection between web browsers – used by end users – and HP Service Manager web tier on the web server “Apache Tomcat” using https protocol you can do the following steps in a simple way:

1. Creating a Keystore file using Java:

o Open cmd and go to the bin folder of your JVM – you can get the path from the Tomcat configure wizard as follows:
o Run the following command
§ Keytool –genkey –alias tomcat –keylg RSA
§ Enter a password for the keystore file – here it is "password"
§ Optionally, you can enter the following fields for org unit, org, Cite, State, Country Code then yes before finally entering the same password again.

o Now a keystore file should be created on your user home directory. On Windows in this example, it will be on: “C:\Users\username\.keystore”

2. Configure Apache Tomcat web server to connect using secure protocol https – Apache 7 is used in this example:

o Open “server.xml” file from this path “C:\Program Files (x86)\Apache Software Foundation\Tomcat 7.0\conf”.
o Go to this part in the file:
<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" />
o Uncomment this part and modify it to be as follows:
<Connector SSLEnabled="true" acceptCount="100" clientAuth="false"
disableUploadTimeout="true" enableLookups="false" maxThreads="25"
port="8443" keystoreFile="C:\Users\username\.keystore" keystorePass="password"
protocol="org.apache.coyote.http11.Http11NioProtocol" scheme="https"
secure="true" sslProtocol="TLS" />
o Note that you should change the keystore path and password
o Save the file and exit


3. Configure SM web tier to connect using https protocol

o Open “web.xml” file from this path “C:\Program Files (x86)\Apache Software Foundation\Tomcat 7.0\webapps\hpsm\WEB-INF”.
o Search for “securelogin” parameter and change it from false to true.

And now finally you can access HP Service Manaegr through https protocol in secure way using the following path https://yourSMAppServer:8443/SMwebtier/index.do










Thank you,
Regards,

View solution in original post

4 Replies
Highlighted
Outstanding Contributor.
Outstanding Contributor.
I solved it by changing the Tomcat server.xml parameters so it is working now for me, thanks.
0 Likes
Highlighted
Micro Focus Expert
Micro Focus Expert

Hi Mahmoud Al-Abgy,

0 Likes
Highlighted
Outstanding Contributor.
Outstanding Contributor.
Hi
To configure a secure connection between web browsers – used by end users – and HP Service Manager web tier on the web server “Apache Tomcat” using https protocol you can do the following steps in a simple way:

1. Creating a Keystore file using Java:

o Open cmd and go to the bin folder of your JVM – you can get the path from the Tomcat configure wizard as follows:
o Run the following command
§ Keytool –genkey –alias tomcat –keylg RSA
§ Enter a password for the keystore file – here it is "password"
§ Optionally, you can enter the following fields for org unit, org, Cite, State, Country Code then yes before finally entering the same password again.

o Now a keystore file should be created on your user home directory. On Windows in this example, it will be on: “C:\Users\username\.keystore”

2. Configure Apache Tomcat web server to connect using secure protocol https – Apache 7 is used in this example:

o Open “server.xml” file from this path “C:\Program Files (x86)\Apache Software Foundation\Tomcat 7.0\conf”.
o Go to this part in the file:
<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" />
o Uncomment this part and modify it to be as follows:
<Connector SSLEnabled="true" acceptCount="100" clientAuth="false"
disableUploadTimeout="true" enableLookups="false" maxThreads="25"
port="8443" keystoreFile="C:\Users\username\.keystore" keystorePass="password"
protocol="org.apache.coyote.http11.Http11NioProtocol" scheme="https"
secure="true" sslProtocol="TLS" />
o Note that you should change the keystore path and password
o Save the file and exit


3. Configure SM web tier to connect using https protocol

o Open “web.xml” file from this path “C:\Program Files (x86)\Apache Software Foundation\Tomcat 7.0\webapps\hpsm\WEB-INF”.
o Search for “securelogin” parameter and change it from false to true.

And now finally you can access HP Service Manaegr through https protocol in secure way using the following path https://yourSMAppServer:8443/SMwebtier/index.do










Thank you,
Regards,

View solution in original post

Highlighted
Micro Focus Expert
Micro Focus Expert
Thanks mahmoud al abgy a lot
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.