ConnectALL : Setup HTTPS with DNS

Products

• ConnectAll On-Prem
• ConnectALL

Issue/Introduction

When you setup a new ConnectALL instance you may want to secure the access. This article covers the steps to configure https in ConnectALL.

Environment

3.x

Resolution

1. Get the server certificate from respective certificate authority with DNS entry for said server.
2. Create keystore for Tomcat using steps below with self signed certificate.
   • keytool -genkey -alias tomcat -keyalg RSA -keystore C:\ConnectALL\UI\tomcat.keystore -- You will be asked to enter some details and setup the password for keystore.
   • keytool -import -trustcacerts -alias tomcat -file <path_to_certificate_file> -keystore C:\ConnectALL\UI\tomcat.keystore -storepass <keystore_password>
3. Configure Tomcat
   • Edit ../UI/tomcat/conf/server.xml
   • Look for connector using port 8080 and change the redirect port to 8443 or 443 as per your requirement. Like below.

<Connector port="8080" protocol="HTTP/1.1"

connectionTimeout="20000"

redirectPort="8443" />

 

<Connector

port="8443"

protocol="org.apache.coyote.http11.Http11NioProtocol"

SSLEnabled="true"

maxThreads="25"

acceptCount="100"

scheme="https"

secure="true"

disableUploadTimeout="true"

enableLookups="false"

clientAuth="false">

<SSLHostConfig protocols="TLSv1.2,TLSv1.3">

<Certificate

certificateKeystoreFile="E:\ConnectALL\UI\tomcat.jks"

certificateKeystorePassword="changeit"

type="RSA" />

</SSLHostConfig>

</Connector>

• • Add connector as below with details of keystore and password.
  • Restart ConnectALL UI service and verify the access using DNS url from outside the server.

 

Additional Information

Reach out to support for any help.