Appboard/2.4/admin/ssl configuration: Difference between revisions
imported>Jason.nicholls |
imported>Jason.nicholls No edit summary |
||
| Line 6: | Line 6: | ||
== Configuring AppBoard for SSL == | == Configuring AppBoard for SSL == | ||
To enable HTTPS (HTTP over SSL) mode use the <tt>HTTP_SSL</tt> runtime option and set it to true. In addition you may want to also change: | To enable HTTPS (HTTP over SSL) mode use the <tt>HTTP_SSL</tt> runtime option and set it to <tt>true</tt>. In addition you may want to also change: | ||
* <tt>HTTP_PORT</tt>: HTTPS is typically served on port 443 | * <tt>HTTP_PORT</tt>: HTTPS is typically served on port 443 | ||
| Line 14: | Line 14: | ||
See the [[Runtime_Options|Runtime Options]] page for more information on these settings and how to configure them. | See the [[Runtime_Options|Runtime Options]] page for more information on these settings and how to configure them. | ||
{{Warning|Do not configure SSL by editing the AppBoard server.xml file as this is replaced on upgrade. The correct way is to edit the runtime options.}} | |||
Revision as of 03:51, 1 October 2013
For security reasons it's recommended to run AppBoard over SSL (Secure Socket Layer). This will ensure all communications between clients (browsers) and the AppBoard server are encrypted.
By default AppBoard is configured with SSL disabled, but it does ship with a self-signed server certificate and can easily be enabled. In production environments this certificate should be replaced with one issued by a known certificate provider or one signed by a trusted root certificate within the organization.
Configuring AppBoard for SSL
To enable HTTPS (HTTP over SSL) mode use the HTTP_SSL runtime option and set it to true. In addition you may want to also change:
- HTTP_PORT: HTTPS is typically served on port 443
- KEYSTORE_FILE: if using your own certificate
- KEYSTORE_PASS: if using your own certificate
- KEYSTORE_TYPE: if using your own certificate
See the Runtime Options page for more information on these settings and how to configure them.
