Jboss-HTTPS-Integration: Difference between revisions
| Line 41: | Line 41: | ||
1. Make Sure you have ssl for apache installed i.e yum install mod_ssl | 1. Make Sure you have ssl for apache installed i.e yum install mod_ssl | ||
2. Install mod_jk-ap20 , by downloading from http://ftp-hk.tmapy.cz/tmapy-twist/centos/5/updates/i386/RPMS/mod_jk-ap20-1.2.28-2.el5.i386.rpm | 2. Install mod_jk-ap20 , by downloading from http://ftp-hk.tmapy.cz/tmapy-twist/centos/5/updates/i386/RPMS/mod_jk-ap20-1.2.28-2.el5.i386.rpm and installaing via rpm -Uvh | ||
and installaing via rpm -Uvh | |||
3. check for file mod_jk.so in /etc/httpd/modules/ | 3. check for file mod_jk.so in /etc/httpd/modules/ | ||
4. Add following line at the top of /etc/httpd/conf.d/ssl.conf | 4. Add following line at the top of /etc/httpd/conf.d/ssl.conf | ||
JkWorkersFile conf/workers.properties | |||
JkWorkersFile conf/workers.properties | JkShmFile logs/mod_jk.shm | ||
JkShmFile logs/mod_jk.shm | JkLogFile logs/mod_jk.log | ||
JkLogFile logs/mod_jk.log | |||
5 . Add following line after <VirtualHost _default_:443> | 5 . Add following line after <VirtualHost _default_:443> | ||
JkLogLevel info | JkLogLevel info | ||
JkMount /* worker1 | JkMount /* worker1 | ||
6. Make a new file /etc/httpd/conf/workers.properties having following entry | 6. Make a new file /etc/httpd/conf/workers.properties having following entry | ||
worker.list=worker1 | worker.list=worker1 | ||
worker.worker1.type=ajp13 | worker.worker1.type=ajp13 | ||
worker.worker1.host=localhost | worker.worker1.host=localhost | ||
worker.worker1.port=8009 | worker.worker1.port=8009 | ||
7. Restart httpd . and test https://<Servername>/ . It should open the page which is openeing at http://<ServerName>:8080/ | 7. Restart httpd . and test https://<Servername>/ . It should open the page which is openeing at http://<ServerName>:8080/ | ||
==='''Testing'''=== | ==='''Testing'''=== | ||
Revision as of 05:34, 17 September 2013
JBOSS-HTTPS-Integration
Purpose
We have to ensure that access to the HRMS / ERP portal (JBOSS based Applications) is secure and based of standard mechanism with HTTPS / SSL access.
Objective
Move JBOSS access to SSL based access and that too on direct URL like https://Hostname/
and
Not on like http://hostname:port/ which is currently used .
Method
Mod_JK is used to integrate Apache with JBOSS
Referance document
Download
Download for mod_jk for Centos / RHEL 5 http://ftp-hk.tmapy.cz/tmapy-twist/centos/5/updates/i386/RPMS/mod_jk-ap20-1.2.28-2.el5.i386.rpm
Test Bed
Local Server - 192.168.1.215
Assumptions
The Actual URL is http://Servername-IP:port/ and is not in form of http://Servername-IP:port/app1
Process
1. Make Sure you have ssl for apache installed i.e yum install mod_ssl
2. Install mod_jk-ap20 , by downloading from http://ftp-hk.tmapy.cz/tmapy-twist/centos/5/updates/i386/RPMS/mod_jk-ap20-1.2.28-2.el5.i386.rpm and installaing via rpm -Uvh
3. check for file mod_jk.so in /etc/httpd/modules/
4. Add following line at the top of /etc/httpd/conf.d/ssl.conf
JkWorkersFile conf/workers.properties JkShmFile logs/mod_jk.shm JkLogFile logs/mod_jk.log
5 . Add following line after <VirtualHost _default_:443>
JkLogLevel info JkMount /* worker1
6. Make a new file /etc/httpd/conf/workers.properties having following entry
worker.list=worker1 worker.worker1.type=ajp13 worker.worker1.host=localhost worker.worker1.port=8009
7. Restart httpd . and test https://<Servername>/ . It should open the page which is openeing at http://<ServerName>:8080/
Testing
Go to URL https://192.168.1.215/ page and it should display the moothod login page . Enter the application with right credentials , you should be seemlessly working .
Also , normal http ( not https) should give you pages like test page of apache or for pgadmin you should get it via http://192.168.1.215/phpPgAdmin and so on . That means your old apache application / URLs should work as it is.