Return
-
Title
How to configure the Web Client 5.8.x to use HTTPS/TLS1.x -
Description
How to configure the Web Client 5.8.x to use HTTPS/TLS1.x -
Cause
N/A. -
Resolution
- Shut down the Stat central agent.
- Obtain a keystore with a self-signed certificate from your security group or build it yourself, if authorized. You need to know the keystore file name and the password that opens it.
- Once you have the Keystore, move it to <STAT_HOME>/app/standalone/configuration
- To turn on SSL:
- Go to <STAT_HOME>/app/ standalone/configuration/standalone-full.xml and turn on SSL.
Look for this section:<security-realm name="SslRealm"><server-identities><ssl><keystore path="keystore.jks"relative-to="jboss.server.config.dir"keystore-password="changeMe"/></ssl></server-identities></security-realm>
-->
Note: Pay close attention to the green section in the screenshot above.
Uncomment the block by moving the trailing --> to the end of this line:
<!--
Now it’s look like this screenshot below:
- Look at this section:
<security-realm name="SslRealm"><server-identities><ssl><keystore path="keystore.jks"relative-to="jboss.server.config.dir"keystore-password="password"/></ssl></server-identities></security-realm>- Make sure to specify the certificate/keystore file name. In my case, I have created a keystore called stat.keystore with password statcm
- Look for this block in the file:
<!--
<https-listener name="default-ssl" socket-binding="https" security-realm="SslRealm" max-post-size="999999999"/>
-->
- Uncomment the block by moving the trailing --> to the end of this line:
<!—
The edits will now look like this:<!-- -->
<https-listener name="default-ssl" socket-binding="https" security-realm="SslRealm" max-post-size="999999999"/>
At this point users can log in as http:servername:8080/stat or as https:servername:8443.- If you want to use TLSx protocols, in the same https-listener line append the parameter.
"enabled-protocols="TLSv1.1, TLSv1.2, TLSv1.3"
5. To have the port location automatically change from 8080 to 8443 when logging into the Stat Web Client follow the steps below:- Stop the agent.
- Move <STAT_HOME>/app/standalone/deployments/stat-agent.ear to a location outside of the <STAT_HOME> folder for backup purposes.
- Locate the stat-agent.ear file in stat-agent-https.zip from this distribution package and copy it into <STAT_HOME>/app/standalone/deployments.
- Restart the Stat Central Agent.
- Log into Stat Windows client | navigate to Help | About Stat… and notice the port is still set to 8080. If you click on the URL then it will automatically change to 8443.
