cancel
Showing results for 
Search instead for 
Did you mean: 

Any way to redirect tomcat 8080 to https?

zanity84
Champ in-the-making
Champ in-the-making
Hello,

I am in the midst of configuring Alfresco Community 4.2.a, and I've successfully installed our certificate on the server. Apache also redirects traffic to the SSL connection just fine. However, I've noticed that going to the server using tomcat's port 8080, I can get to the site in regular HTTP. I sniffed out my login information in clear text, so it is imperative to either prevent this access or direct it toward my certificate.

I've tried commenting out tomcat's port configuration in server.xml, but then I can't log into the site. Is there an easy way to do this? Thanks,
5 REPLIES 5

kossel
Champ in-the-making
Champ in-the-making
since I m waiting someone to help me, i will help you. but actually it's not alfresco related it's java related you should use google before…

for share:
go to Alfresco\tomcat\webapps\share\WEB-INF
for explorer
go to Alfresco\tomcat\webapps\alfresco\WEB-INF

open web.xml

add
<security-constraint>
     <web-resource-collection>
        <web-resource-name>Protected Context</web-resource-name>
          <url-pattern>/*</url-pattern>
      </web-resource-collection>
  
      <user-data-constraint>
         <transport-guarantee>CONFIDENTIAL</transport-guarantee>
      </user-data-constraint>
   </security-constraint>

before

</web-app>

zanity84
Champ in-the-making
Champ in-the-making
Okay, so it redirected just fine to 8443. However, now it doesn't let me log into Alfresco.  I'm sure it's an easy fix, but I'm not sure where to go about it. Thanks,

kossel
Champ in-the-making
Champ in-the-making
what do you mean with, doesnt let you login

zanity84
Champ in-the-making
Champ in-the-making
Okay, so prior to making this post, I was able to redirect regular http traffic to my ssl certificate. For example, http://server.alf.com would be redirected to https://server.alf.com. However, going to server.alf.com:8080/share would still go to http and I could see the username and password. With your first post, this was mitigated by directing server.alf.com:8080/share to server.alf.com:8443/share, which brought on the self-signed certificate. That is exactly what I want to have happen. However, when starting the server, I can't log into Alfresco.  It gives me the "Server is unavailable…" error, and this occurs whether I access through Apache or Tomcat.

marian22
Champ in-the-making
Champ in-the-making
At last I have found something from this post which feels pretty good. I’ll definitely be back for updates on this for sure. I am really happy to study it and being able to reveal my ideas on it. I want to say that this article is amazing, great written and come with approximately all vital info's. I'd like to peer more posts like this. So nice to discover someone with genuine thoughts on this issue. I learned some things from your post. This gives a big help about on how to configure Alfresco.

Be here to, <a href="http://boostplays.org/buy-soundcloud-downloads/">gain soundcloud downloads</a>

Thank you for this.