Bug 754864

Summary: Make skynet use HTTPS
Product: [Community] PressGang CCMS Reporter: Matthew Casperson <mcaspers>
Component: Web-UIAssignee: Matthew Casperson <mcaspers>
Status: CLOSED CURRENTRELEASE QA Contact:
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 1.xCC: anross, cbredesen, topic-tool-list
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-11-22 21:40:19 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Matthew Casperson 2011-11-17 23:44:31 UTC
/UserList.xhtml

Comment 1 Matthew Casperson 2011-11-22 21:16:36 UTC
*** Bug 755732 has been marked as a duplicate of this bug. ***

Comment 2 Matthew Casperson 2011-11-22 21:40:19 UTC
Add these lines to standalone.xml (in the <subsystem xmlns="urn:jboss:domain:web:1.0" default-virtual-server="default-host"> element):

<connector name="https" protocol="HTTP/1.1" socket-binding="https" scheme="https" secure="true">
 <ssl name="https" password="password" certificate-key-file="../standalone/configuration/server_keystore.jks"/>
</connector>

Add this attribute to <components> in components.xml:

xmlns:navigation="http://jboss.com/products/seam/navigation"

Add this string to the <components> xsi:schemaLocation attribute in components.xml:

http://jboss.com/products/seam/navigation http://jboss.com/products/seam/navigation-2.2.xsd

Add this element to <components> in components.xml:

<navigation:pages http-port="8080" https-port="8443"/>

Add the following attribute to <page> in login.page.xml:

scheme="https"

Create the keystore with:

keytool -genkey -alias skynetcert -keyalg RSA -keysize 1024 -dname "CN=skynet.bne.redhat.com,OU=ECS,O=Red Hat,L=Brisbane,S=Queensland,C=AUS" -keypass password -keystore server_keystore.jks -storepass password

Comment 3 Matthew Casperson 2011-11-22 21:57:31 UTC
Also need to add the redirect-port="8443" attribute to:

<connector name="http" protocol="HTTP/1.1" socket-binding="http" scheme="http" redirect-port="8443"/>