Bug 754864 - Make skynet use HTTPS
Summary: Make skynet use HTTPS
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: PressGang CCMS
Classification: Community
Component: Web-UI
Version: 1.x
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: ---
Assignee: Matthew Casperson
QA Contact:
URL:
Whiteboard:
: 755732 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-11-17 23:44 UTC by Matthew Casperson
Modified: 2014-08-04 22:26 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-11-22 21:40:19 UTC


Attachments (Terms of Use)

Description Matthew Casperson 2011-11-17 23:44:31 UTC
/UserList.xhtml

Comment 1 Matthew Casperson 2011-11-22 21:16:36 UTC
*** Bug 755732 has been marked as a duplicate of this bug. ***

Comment 2 Matthew Casperson 2011-11-22 21:40:19 UTC
Add these lines to standalone.xml (in the <subsystem xmlns="urn:jboss:domain:web:1.0" default-virtual-server="default-host"> element):

<connector name="https" protocol="HTTP/1.1" socket-binding="https" scheme="https" secure="true">
 <ssl name="https" password="password" certificate-key-file="../standalone/configuration/server_keystore.jks"/>
</connector>

Add this attribute to <components> in components.xml:

xmlns:navigation="http://jboss.com/products/seam/navigation"

Add this string to the <components> xsi:schemaLocation attribute in components.xml:

http://jboss.com/products/seam/navigation http://jboss.com/products/seam/navigation-2.2.xsd

Add this element to <components> in components.xml:

<navigation:pages http-port="8080" https-port="8443"/>

Add the following attribute to <page> in login.page.xml:

scheme="https"

Create the keystore with:

keytool -genkey -alias skynetcert -keyalg RSA -keysize 1024 -dname "CN=skynet.bne.redhat.com,OU=ECS,O=Red Hat,L=Brisbane,S=Queensland,C=AUS" -keypass password -keystore server_keystore.jks -storepass password

Comment 3 Matthew Casperson 2011-11-22 21:57:31 UTC
Also need to add the redirect-port="8443" attribute to:

<connector name="http" protocol="HTTP/1.1" socket-binding="http" scheme="http" redirect-port="8443"/>


Note You need to log in before you can comment on or make changes to this bug.