Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

XpoLog installation is based on a Tomcat application server and by default, Port 30303 is used for HTTP access and Port 30443 for HTTPS.

...

  1. Certificate (Tomcat supports .jks and .pfx files)
    The file should contain the entire certificate chain plus the matching private key.

  2. KeystorePass (The password for the .jks OR .pfx file)

  3. KeyAlias + keyPass (Not mandatory - used for the server key and certificate inside the keystore. If not specified, the first key read from the keystore will be used)
    Key Alias and Key Pass are relevant Pass is mandatory only in case you decide to set a different password for the private key.

Update Tomcat's server xml configuration file with the new certificate:

...

<Connector SSLEnabled="true" acceptCount="100" clientAuth="false" compressableMimeType="text/html,text/xml" compression="on" compressionMinSize="2048" debug="0" disableUploadTimeout="true" enableLookups="false" maxHttpHeaderSize="8192" maxPostSize="-1" maxSpareThreads="75" maxThreads="150" minSpareThreads="25" noCompressionUserAgents="gozilla, traviata" port="30443" protocol="org.apache.coyote.http11.Http11NioProtocol" relaxedQueryChars="[]|{}^\`"<>" scheme="https" secure="true" sslProtocol="TLSv1.2" xpolog="ssl"><SSLHostConfig><Certificate certificateKeyAlias="[KEYALIAS]" certificateKeyPassword="[KEYPASS]" certificateKeystoreFile="/[INSTALLATION_DIR]/ServletContainer/[CERTIFICATE]" certificateKeystorePassword="[KETSTOREPASS]" certificateKeystoreType="PKCS12"/></SSLHostConfig></Connector>

...