(Optional) Set up Apache Tomcat Web Server for use with SSL

It is possible to use SSL (Secure Socket Layer) communication in the web client. To do this, changes to the configuration of Tomcat and a valid key store are required. For details on how to create a key store and use Tomcat with SSL, refer to the official Tomcat documentation.

If a valid key store file is available, Tomcat can be configured to use it:

• Open the folder “<Tomcat installation>/conf” and edit the file server.xml. Look for a section similar to:

<!-- Define a SSL HTTP/1.1 Connector on port 8443

This connector uses the JSSE configuration, when using APR, the

connector should be using the OpenSSL style configuration

described in the APR documentation -->

<!--

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"

maxThreads="150" scheme="https" secure="true"

clientAuth="false" sslProtocol="TLSv1.2" sslEnabledProtocols="TLSv1.2,TLSv1.1,TLSv1" />

-->

• This section is usually commented out. Remove the comments and edit the section so it looks e.g. as follows:

<!-- Define a SSL HTTP/1.1 Connector on port 8443

This connector uses the JSSE configuration, when using APR, the

connector should be using the OpenSSL style configuration

described in the APR documentation -->

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"

maxThreads="150" scheme="https" secure="true"

maxHttpHeaderSize="8192" minSpareThreads="25" maxSpareThreads="75"

enableLookups="false" disableUploadTimeout="true"

acceptCount="100" keystoreFile="C:/.keystore" keystorePass="changeit"

clientAuth="false" sslProtocol="TLSv1.2" sslEnabledProtocols="TLSv1.2,TLSv1.1,TLSv1" />

This defines a new connector using SSL. It assumes that there is a valid key store with password “changeit” (attribute “keystorePass”) at “C:\.keystore” (attribute “keystoreFile”). These parameters have to be adapted to the desired environment.

After changing the file and restarting Tomcat, the ADOIT web client is available at “https://<SERVER_NAME>:8443/ADOIT12_0”.

note

The default value of the SSL HTTP/1.1 Connector Port is 8443. You can change this value here.