Enable ssl

Home

Forums

Feature Requests

Beta Issues

SysAid Resources

Documentation

Support

Hello Guest,

DOWNLOAD FREE EDITION

Recent Topics

Hottest Topics

Online Members

Member Listing

Advanced Search

Enable ssl

XML

Forum Index » SysAid Installation & Beyond

Author

Message

[Post New]

18/01/2011 04:09:44

Subject: Enable ssl

havard.grondal
SysAider

SysAider from release 6

SysAider from release 6

Norway

Pathfinder

Joined: 02/11/2009
Messages: 7
Offline

Hey

I have a problem when enabeling SSL on sysaid. I have used this guide to enable ssl:

To configure SSL encryption (https) for SysAid, you must first create a keystore file (which acts as the certificate). If you wish to use a purchased certificate or just one from your own CA, please consult the guide on Apache's website at http://jakarta.apache.org/tomcat/tomcat-4.1-doc/ssl-howto.html

To create a keystore file, please use the following command:
%JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA
This will create a “.keystore” file in your C:\Documents and Settings\CURRENT-USER\ folder. Please copy this file to your ...\SysAidServer\ folder.

When creating this file, you should use the password "changeit" for both passwords

The next step would be to edit ...\SysAidServer\tomcat\conf\server.xml file. Please add the below text right after the existing <Connector> tag:

<Connector className="org.apache.catalina.connector.http.HttpConnector" port="8443" minProcessors="5" maxProcessors="75" enableLookups="true" redirectPort="443" acceptCount="10" debug="0" scheme="https" secure="true">
<Factory className="org.apache.catalina.net.SSLServerSocketFactory" clientAuth="false" protocol="TLS" keystoreFile="C:\Program Files\SysAidServer\.keystore"/>
</Connector>

port=”8443” represent the port SysAid will be listening on for secure connections. In this case you will have to use the following URL: https://SERVER-NAME:8443/

But when i try to connect with ssl i get "ssl_error_rx_record_too_long".

Here is my entire server.xml file:

<?xml version='1.0' encoding='utf-8'?>
<!--
  Licensed to the Apache Software Foundation (ASF) under one or more
  contributor license agreements.  See the NOTICE file distributed with
  this work for additional information regarding copyright ownership.
  The ASF licenses this file to You under the Apache License, Version 2.0
  (the "License"); you may not use this file except in compliance with
  the License.  You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
  distributed under the License is distributed on an "AS IS" BASIS,
  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  See the License for the specific language governing permissions and
  limitations under the License.
-->

<Server port="8005" shutdown="SHUTDOWN">

<Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
  
  <Listener className="org.apache.catalina.core.JasperListener" />
  
  <Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />
  
  <Listener className="org.apache.catalina.mbeans.ServerLifecycleListener" />
  <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />

<GlobalNamingResources>
    
    <Resource name="UserDatabase" auth="Container"
              type="org.apache.catalina.UserDatabase"
              description="User database that can be updated and saved"
              factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
              pathname="conf/tomcat-users.xml" />
  </GlobalNamingResources>

<Service name="Catalina">
  
    
    
    
    
    
	
    <Connector port="80" protocol="HTTP/1.1"
               connectionTimeout="20000" 
               redirectPort="8443" />
    
    
           
    
    
	
	<Connector className="org.apache.catalina.connector.http.HttpConnector" port="443" minProcessors="5" maxProcessors="75" enableLookups="true" redirectPort="443" acceptCount="10" debug="0" scheme="https" secure="true">
	<Factory className="org.apache.catalina.net.SSLServerSocketFactory" clientAuth="false" protocol="TLS" keystoreFile="C:\Program Files\SysAidServer\.keystore"/>
	</Connector>

<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />

<Engine name="Catalina" defaultHost="localhost">

<Realm className="org.apache.catalina.realm.UserDatabaseRealm"
             resourceName="UserDatabase"/>

<Host name="localhost"  appBase="webapps"
            unpackWARs="true" autoDeploy="true"
            xmlValidation="false" xmlNamespaceAware="false">

<Context path="" docBase="../../root" debug="0"/>
      </Host>
    </Engine>
  </Service>
</Server>

[Post New]

18/01/2011 14:13:03

Subject: Re:Enable ssl

erez.shin
SysAid Customer Relations

Joined: 22/03/2010
Messages: 54
Offline

Hi there

Since we have instruction SysAid V7 and older version, let me know what is you SysAid version and what is your tomcat version (see Preference > About page to get this info)

If you are using SysAid version 7 with tomcat 6 Please follow the instructions bellow:

In order to configure SSL encryption (https) for SysAid, you must first create a keystore file (which acts as the certificate). If you wish to use a purchased certificate or one from your own certificate authority, please consult the guide on the Apache website at http://jakarta.apache.org/tomcat/tomcat-4.1-doc/ssl-howto.html.

To create a keystore file, please run the following command:
%JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA

This will create a “.keystore” file in the C:\Documents and Settings\CURRENT-USER\ folder. Please copy this file to the ...\SysAidServer\ folder. When creating this file, you should use the password “changeit” for both passwords.

The next step is to edit the ...\SysAidServer\tomcat\conf\server.xml file.
1. Edit it and find the following lines:
<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" />

2. Remove the comment that delimits it ( below them).

3. Change the third line to point to the keystore file:
clientAuth="false" sslProtocol="TLS" keystoreFile="C:\Program Files\SysAidServer\.keystore" />

4. Save the file and restart the SysAid Server service. SysAid should then be accessible via https://server-name:8443

If you encounter any problem, please send email to support@sysaid.com and attach the following files for examination with the support team:
...\SysAidServer\root\WEB-INF\logs (entire directory, zipped)
...\SysAidServer\logs\wrapper.log
...\SysAidServer\tomcat\conf\server.xml

Regards

Erez Shindelman

[Post New]

19/01/2011 03:49:28

Subject: Re:Enable ssl

havard.grondal
SysAider

SysAider from release 6

SysAider from release 6

Norway

Pathfinder

Joined: 02/11/2009
Messages: 7
Offline

That worked, thank you for the info.

[Post New]

19/01/2011 07:06:51

Subject: Re:Enable ssl

erez.shin
SysAid Customer Relations

Joined: 22/03/2010
Messages: 54
Offline

I am very happy to hear that you resolved the issue

Regards

Erez Shindelman

This message was edited 1 time. Last update was at 19/01/2011 07:28:46

Forum Index » SysAid Installation & Beyond

Go to:

Help Desk Software
Free Help Desk Software
Free Asset Management Software
SysAid Helpdesk Software
Web Based Help Desk Software
SysAid Help Desk Forum
General IT Discussion Forum
SysAid CSS Customer Service Software
Customer Support Software

   SysAid Technologies Ltd.
   Toll-Free phone center (U.S.): 1-800-686-7047
   Offices - U.S.617-231-0124
   Israel:+972-3-533-3675
   Skype account:ilient
   Email:helpdesk@sysaid.com
   Optimized by SEO Israel
   SysAid logos and other SysAid Technologies marks
   are trademarks or registered trademarks of
   SysAid Technologies Ltd.
   All Rights Reserved by SysAid Technologies Ltd.
   2002-2011

   Live Support Hours
   07:00 AM - 09:30 PM (UK)
   03:00 AM - 05:30 PM (EDT)

   We provide worldwide services, and we do our best
   to match the working times of customers from
   different time zones.

   SysAid Help Desk Software and Asset Management Software

Privacy Policy © Terms Of Use