12.3.4. Running eXo Platform itself under HTTPS

Warning

You are looking at documentation for an older release. Not what you want? See the current release documentation.

In the previous section you learnt to configure a reverse proxy in front of eXo Platform, and it is the proxy which encrypts the requests and responses. Alternatively you can configure eXo Platform to allow HTTPS access directly, so no proxy between browsers and eXo Platform. See the following diagram :

Configuring eXo Platform's Tomcat

Set the following property in $PLATFORM_TOMCAT_HOME/gatein/conf/exo.properties file:
```
exo.base.url=https://exo1.com:8443
```

Edit the $PLATFORM_TOMCAT_HOME/conf/server.xml file by commenting the following lines:


<Connector address="0.0.0.0" port="8080" protocol="org.apache.coyote.http11.Http11NioProtocol"

enableLookups="false" redirectPort="8443"

connectionTimeout="20000" disableUploadTimeout="true"

URIEncoding="UTF-8"

compression="off" compressionMinSize="2048"

noCompressionUserAgents=".*MSIE 6.*" compressableMimeType="text/html,text/xml,text/plain,text/css,text/javascript" />

Uncomment the following lines and edit with your keystoreFile and keystorePass values:


<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol" SSLEnabled="true"

maxThreads="150" scheme="https" secure="true"

clientAuth="false" sslProtocol="TLS"

keystoreFile="/path/to/file/serverkey.jks"

keystorePass="123456"/>

After starting eXo Platform, you can connect to https://exo1.com:8443/portal. If you are testing with dummy server names, make sure you created the host "exo1.com" in the file /etc/hosts.

Configuring eXo Platform's JBoss

To configure JBoss to run under HTTPS, you just need to set the following property in $PLATFORM_JBOSS_HOME/standalone/configuration/gatein/exo.properties file:

exo.base.url=https://exo1.com:8443

After starting JBoss, you can connect to eXo Platform at https://exo1.com:8443/portal. If you are testing with dummy server names, make sure you created the host "exo1.com" in the file /etc/hosts.