Configuring JBOSS SSL

  1. Edit the <JBOSS_HOME>/server/<SERVER_NAME>/deploy/jbossweb-tomcat55.sar/servers.xml file. After the AJP connector definition, add the following:

          <!-- SSL/TLS Connector configuration using the ATG keystore -->

          <Connector port="8443" address="${jboss.bind.address}"
                maxThreads="100" strategy="ms" maxHttpHeaderSize="8192"
                emptySessionPath="true"
                scheme="https" secure="true" clientAuth="false"
                keystoreFile="<DYNAMO_ROOT>/DAS/keystore/atg-ssl.jks"
                keystorePass="atgkey" sslProtocol = "SSLv3"
                truststoreFile="<DYNAMO_ROOT>/DAS/keystore/cacerts.jks"
                truststorePass="changeit"/>

    Note: You must replace <DYNAMO_ROOT> with the path to your ATG installation. For IBM JVMs, you may need to specify algorithm="IbmX509".

  2. If you need to specify a different HTTPS port than 8443, then you will also need to match the redirectPort attribute of the other connector definitions to match that port.

  3. If installing a web-server or other proxy to a JBoss instance, you will need to set the proxyHost, and proxyPort attributes as well.

For further information, refer to your JBoss Web Application Server documentation.

 
loading table of contents...