Changes between Version 5 and Version 6 of HttpsRemoteFiles

Timestamp:

Feb 7, 2014, 1:49:27 PM (10 years ago)

Author:

olle

Comment:

Added info on setting connection parameters in properties file.

HttpsRemoteFiles

@@ -1 +1 @@
 = Configuring the Proteios server to access remote files via https =
 
-To allow Proteios to use a certificate when accessing remote files over https, it needs to be configured with the location of the certificate files, and a file with th epassword to the certificate. For security reason it could be good to set permissions to the certificate and password files so that they are only readable bty the tomcat user. Not that the certificate file need to be configured with an alias (name) for the certificate to use.
+To allow Proteios to use a certificate when accessing remote files over https, it needs to be configured with the location of the certificate files, and a file with th epassword to the certificate. For security reason it could be good to set permissions to the certificate and password files so that they are only readable by the tomcat user. Note that the certificate file need to be configured with an alias (name) for the certificate to use.
 
 == tomcat ==
-The following jvm parameters needs to be set for tomcat:
+
+=== Alternative 1: tomcat settings as jvm parameters ===
+
+The following jvm parameters need to be set for tomcat:
 
  - -Djavax.net.ssl.keyStore=PATH_TO_P12_FILE
@@ -19 +22 @@
 cert.alias=ALIAS[[BR]] (for example cert.alias=my name)
 
+=== Alternative 2: tomcat settings in properties file (Proteios SE 2.20.0 and higher) ===
+The preferred method is to set the connection parameter values in properties file `connection.properties`.
+Copy template file `client/servlet/conf/connection.properties.in` to a file `connection.properties`
+and add the settings to the latter:
+
+ - cert.alias = ALIAS
+
+ - cert.passFile = PATH_TO_P12_PASSWORD_FILE
+
+ - javax.net.ssl.keyStore = PATH_TO_P12_FILE
+
+ - javax.net.ssl.keyStorePassword = P12_KEYSTORE_PASSWORD
+
+ - javax.net.ssl.trustStore = PATH_TO_JKS_FILE
+
+ - javax.net.ssl.trustStorePassword = JKS_TRUSTSTORE_PASSWORD
+
+If `keyStorePassword` is missing, an attempt is made to read it from `cert.passFile`.
+
 == FTP server ==
+If the connection parameters are set in a properties file (alternative 2 above),
+no changes should be needed for the ftp server. Otherwise, make the following additions:
+
 For the ftp server, currently the startup script has to be edited:
 Add a line in the beginning:[[BR]]