Jboss-HTTPS-Integration
JBOSS-HTTPS-Integration
Purpose
We have to ensure that access to the HRMS / ERP portal (JBOSS based Applications) is secure and based of standard mechanism with HTTPS / SSL access.
Objective
Move JBOSS access to SSL based access and that too on direct URL like https://Hostname/
and
Not on like http://hostname:port/ which is currently used .
Method
Mod_JK is used to integrate Apache with JBOSS
Referance document
Download
Download for mod_jk for Centos / RHEL 5 http://ftp-hk.tmapy.cz/tmapy-twist/centos/5/updates/i386/RPMS/mod_jk-ap20-1.2.28-2.el5.i386.rpm
Test Bed
Local Server - 192.168.1.215
Assumptions
The Actual URL is http://Servername-IP:port/ and is not in form of http://Servername-IP:port/app1
Process
1. Make Sure you have ssl for apache installed i.e yum install mod_ssl
2. Install mod_jk-ap20 , by downloading from http://ftp-hk.tmapy.cz/tmapy-twist/centos/5/updates/i386/RPMS/mod_jk-ap20-1.2.28-2.el5.i386.rpm and installaing via rpm -Uvh
3. check for file mod_jk.so in /etc/httpd/modules/
4. Add following line at the top of /etc/httpd/conf.d/ssl.conf LoadModule jk_module modules/mod_jk.so JkWorkersFile conf/workers.properties JkShmFile logs/mod_jk.shm JkLogFile logs/mod_jk.log
5 . Add following line after <VirtualHost _default_:443> JkLogLevel info JkMount /* worker1
6. Make a new file /etc/httpd/conf/workers.properties having following entry worker.list=worker1 worker.worker1.type=ajp13 worker.worker1.host=localhost worker.worker1.port=8009
7. Restart httpd . and test https://<Servername>/ . It should open the page which is openeing at http://<ServerName>:8080/
Testing
Go to URL https://192.168.1.215/ page and it should display the moothod login page . Enter the application with right credentials , you should be seemlessly working .
Also , normal http ( not https) should give you pages like test page of apache or for pgadmin you should get it via http://192.168.1.215/phpPgAdmin and so on . That means your old apache application / URLs should work as it is.