Enable HTTPS on ASR Manager (Optional)

If you need to use HTTPS for security purposes, you can set up HTTPS/SSL for the ASR Manager HTTP receiver.

1. Once the SSL certificate from a trusted authority is loaded into keystore, then add the following SSL connector in /var/opt/SUNWsasm/configuration/jetty/jetty.xml below the <Call name="addConnector"> sections:

   <Call name=”addConnector”>
     <Arg>
       <New class=”org.mortbay.jetty.security.SslSocketConnector”>
         <Set name=”Port”>443</Set>
         <Set name=”maxIdleTime”>30000</Set>
         <Set name=”keystore”>path-to-keystore</Set>
         <Set name=”password”>password</Set>
         <Set name=”keyPassword”key-password</Set>
         <Set name=”truststore”>path-to-keystore</Set>
         <Set name=”trustPassword”trust-password</Set>
       </New>
     </Arg>
   </Call>
   

   Passwords above can be plain text or obfuscated as follows:

   java -classpath lib/jetty-6.1.7.jar:lib/jetty-util-6.1.7.jar

   org.mortbay.jetty.security.Password plaintext-password

   Then copy and paste the output line starting with OBF: (including the OBF: part) into this jetty.xml config file.

2. Restart OASM.

   • On a system running Oracle Solaris, type:

     # svcadm restart sasm

   • On a system running Oracle Linux, type:

     # /opt/SUNWsasm/bin/sasm stop-instance

     # /opt/SUNWsasm/bin/sasm start-instance

3. Verify the SSL setup by accessing the following URL from a browser:

   https://ASR-Manager-name/asr