Reference Guide
...
Enabling HTTPS on the Kron PAM...
Web Server Configuration
- Open an SSH connection to Kron PAM with the root account.
- Open and edit lines 87-111 of the file /u01/netright-tomcat/conf/server.xml.
- Remove the comment tags at the top and bottom. (This is already done.)
- Change the keystoreFile, keystorepass and keyAlias parameters.
1 <!--
2 <Connector port="443" maxThreads="200" scheme="https" secure="true" SSLEnabled="true"
3 keystoreFile="/u01/netright-tomcat/conf/cert/sctest.jks" keystorePass="pass123"
4 sslEnabledProtocols="TLSv1.1,TLSv1.2"
5 server="SingleConnect Server"
6 ciphers="TLS_DHE_RSA_WITH_AES_128_CBC_SHA,
7 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,
8 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,
9 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
10 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,
11 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
12 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
13 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
14 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
15 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,
16 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256,
17 TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,
18 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,
19 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256,
20 TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,
21 TLS_RSA_WITH_AES_128_CBC_SHA,
22 TLS_RSA_WITH_AES_128_CBC_SHA256,
23 TLS_RSA_WITH_AES_128_GCM_SHA256"
24 clientAuth="false" sslProtocol="TLSv1.2" keyAlias="sctest"/>
25 -->
26

- Open and edit lines 4683-4694 of the file /u01/netright-tomcat/conf/web.xml. Remove the comment tags at the top and bottom.
HTML
1<!--
2<security-constraint>
3 <web-resource-collection>
4 <web-resource-name>Protected Context</web-resource-name>
5 <url-pattern>/*</url-pattern>
6 </web-resource-collection>
7
8 <user-data-constraint>
9 <transport-guarantee>CONFIDENTIAL</transport-guarantee>
10 </user-data-constraint>
11</security-constraint>
12-->

- Open and edit the file, /u01/netright-tomcat/netright/netright.properties. Change line 18 and add a new property to line 19, as shown below.
118 : netright.baseurl=http://127.0.0.1:80
2
3change to:as
4
518 : netright.baseurl=https://127.0.0.1:443
619 : netright.cookie.secure=true
7

- Restart the Web Portal service with the command: systemctl restart netright-tomcat