Author: smumford
Date: 2013-01-22 00:12:14 -0500 (Tue, 22 Jan 2013)
New Revision: 9069
Modified:
epp/docs/branches/6.0/Installation_Guide/en-US/HTTPSConfiguration.xml
Log:
https://docs.jboss.org/author/display/GTNPORTAL35/HTTPS+Configuration Changes incorporated
into enterprise doc
Modified: epp/docs/branches/6.0/Installation_Guide/en-US/HTTPSConfiguration.xml
===================================================================
--- epp/docs/branches/6.0/Installation_Guide/en-US/HTTPSConfiguration.xml 2013-01-21
05:12:50 UTC (rev 9068)
+++ epp/docs/branches/6.0/Installation_Guide/en-US/HTTPSConfiguration.xml 2013-01-22
05:12:14 UTC (rev 9069)
@@ -5,8 +5,9 @@
]>
<section id="HTTPS_Configuration">
<title>HTTPS Configuration</title>
+ <remark>Source:
https://docs.jboss.org/author/display/GTNPORTAL35/HTTPS+Configuration<...
<
remark>https://bugzilla.redhat.com/show_bug.cgi?id=794440 - 20120221 - Reworked
the entire section to cover keystore and truststore configuration specific to EPP.
</remark>
- <para>JBoss Enterprise Portal Platform runs by default in HTTP mode. For
security purposes, configure your production platform to run in HTTPS mode.
</para>
+ <para>JBoss Enterprise Portal Platform runs by default in HTTP mode. For security
purposes, configure your production platform to run in HTTPS mode. </para>
<important>
<para>Understanding the fundamentals of keystore and truststore configuration
is critical to the tasks in this section. </para>
<para>Refer to the JBoss Enterprise Application Platform
<citetitle>Security Guide</citetitle> <citetitle>"SSL
Encryption Overview"</citetitle> chapter for detailed encryption theory and
procedures relevant to all JBoss Middleware platforms. </para>
@@ -78,7 +79,7 @@
<programlisting language="XML"><Connector
protocol="HTTP/1.1" SSLEnabled="true"
port="8443" address="${jboss.bind.address}"
scheme="https" secure="true"
clientAuth="false"
sslProtocol = "TLS"
-
keystoreFile="${jboss.server.home.dir}/conf/<replaceable>server.keystore</replaceable>"
+ keystoreFile="$JAVA_HOME/jre/lib/security/cacerts"
keystorePass="123456"
truststoreFile="/usr/java/<replaceable>JDK_VERSION/</replaceable>jre/lib/security/cacerts"
truststorePass="<replaceable>changeit</replaceable>"