- Shut down the Stat central agent.
- Obtain a keystore with a self-signed certificate from your security group or build it yourself, if authorized. You need to know the keystore file name and the password that opens it.
- Once you have the Keystore, move it to <STAT_HOME>/app/standalone/configuration
- To turn on SSL:
- Go to <STAT_HOME>/app/ standalone/configuration/standalone-full.xml and turn on SSL.
Look for this section:
<security-realm name="SslRealm">
<server-identities>
<ssl>
<keystore path="keystore.jks"
relative-to="jboss.server.config.dir"
keystore-password="changeMe"/>
</ssl>
</server-identities>
</security-realm>
-->
Note: Pay close attention to the green section in the screenshot above.
Uncomment the block by moving the trailing --> to the end of this line:
<!--
Now it’s look like this screenshot below:
<security-realm name="SslRealm">
<server-identities>
<ssl>
<keystore path="keystore.jks"
relative-to="jboss.server.config.dir"
keystore-password="password"/>
</ssl>
</server-identities>
</security-realm>
- Make sure to specify the certificate/keystore file name. In my case, I have created a keystore called stat.keystore with password statcm
- Look for this block in the file:
<!--
<https-listener name="default-ssl" socket-binding="https" security-realm="SslRealm" max-post-size="999999999"/>
-->
- Uncomment the block by moving the trailing --> to the end of this line:
<!—
The edits will now look like this:
<!-- -->
<https-listener name="default-ssl" socket-binding="https" security-realm="SslRealm" max-post-size="999999999"/>
At this point users can log in as http:servername:8080/stat or as https:servername:8443.
- If you want to use TLSx protocols, in the same https-listener line append the parameter.
"enabled-protocols="TLSv1.1, TLSv1.2, TLSv1.3"
5. To have the port location automatically change from 8080 to 8443 when logging into the Stat Web Client follow the steps below:
- Stop the agent.
- Move <STAT_HOME>/app/standalone/deployments/stat-agent.ear to a location outside of the <STAT_HOME> folder for backup purposes.
- Locate the stat-agent.ear file in stat-agent-https.zip from this distribution package and copy it into <STAT_HOME>/app/standalone/deployments.
- Restart the Stat Central Agent.
- Log into Stat Windows client | navigate to Help | About Stat… and notice the port is still set to 8080. If you click on the URL then it will automatically change to 8443.
