How to enable secure communication (SSL) for GridServer Admin GUI

How to enable secure communication (SSL) for GridServer Admin GUI

book

Article ID: KB0078767

calendar_today

Updated On:

Products Versions
TIBCO DataSynapse GridServer 6.1.1, 6.2.0, 6.3.0, 7.0

Description

N/A

Issue/Introduction

This article explains how to enable secure communication for GridSever Admin GUI only

Environment

All

Resolution

To enable SSL only for GridServer Admin GUI, follow the steps highlighted below:-
  1. Comment or delete the HTTP connector for Admin GUI in server.xml file and uncomment the SSL connector for Admin UI in the same file.
  2. Make sure Admin GUI connector is listed first in server.xml as the installer selects first connector for GUI and second connector for component messaging. Save changes.
  3. Follow rest of the steps highlighted in GridServer documentation to re-install the manager from Admin UI and restart it.
 
Below is an example showing how server.xml should look like with default ports:-
 
+++++
<!-- The connector for GUI Admin-->
<Connector port="8443"
               enableLookups="false"
               SSLEnabled="true"
               scheme="https"
               secure="true"
               SSLProtocol="TLSv1.1"
               SSLCertificateFile="${catalina.base}/certs/server.crt"
               SSLCertificateKeyFile="${catalina.base}/certs/server.key"
               maxThreads="300"
     />
 
<!-- The connector for Component Messaging.
        pollerSize: Corresponds to the amount of concurrent connections in KeepAlive
    -->
    <Connector port="8000"
               enableLookups="false"
               pollerSize="8192"
               connectionTimeout="60000"
               maxThreads="300"
     />
+++++

Additional Information

N/A