Friday, November 11, 2011

Apache SSL with JBoss

Prerequisites
Jboss-4.2.2.GA installed

1. Install Apache 2.2
C:\Program Files\


2. Copy Apache server to new server
i. C:\Program Files\Apache Software Foundation\Apache2.2\conf\
httpd.conf
ii. C:\Program Files\Apache Software Foundation\Apache2.2\conf\uriworkermap.properties
iii. C:\Program Files\Apache Software Foundation\Apache2.2\conf\worker2.properties
iv. C:\Program Files\Apache Software Foundation\Apache2.2\conf\workers.properties.minimal
v. C:\Program Files\Apache Software Foundation\Apache2.2\conf\workers.properties

3. Get the .crt file and .key file and store it in
C:\Program Files\Apache Software Foundation\Apache2.2\conf\


4. Copy Apache server to new server (All files in module directory)
i. C:\Program Files\Apache Software Foundation\Apache2.2\modules


5. In file C:\Program Files\Apache Software Foundation\Apache2.2\conf\httpd.conf make following changes.
i.
LoadModule jk_module modules/mod_jk.so
JkWorkersFile conf/workers.properties
JkLogFile logs/mod_jk.log
JkMountFile conf/uriworkermap.properties
JkMountCopy All
ii.
Uncomment/add lines

Include conf/extra/httpd-ssl.conf


iii
ServerName 127.0.0.1:443 {host name like host.domain.com}


6. In file C:\Program Files\Apache Software Foundation\Apache2.2\conf\extra\httpd-ssl.conf

make following changes.

i. {apache server ip and SSL port}

ii. ServerName 127.0.0.1:443 {host name like host.domain.com}

iii. Change the .crt and .key file name
SSLCertificateFile "C:/Program Files/Apache Software Foundation/Apache2.2/conf/ssl.crt"
SSLCertificateKeyFile "C:/Program Files/Apache Software Foundation/Apache2.2/conf/ssl.key"

7. In file C:\Program Files\Apache Software Foundation\Apache2.2\conf\workers.properties

make following changes.
i. worker.tomcat1.host=192.168.1.246 {Jboss server ip}
ii. worker.tomcat2.host=192.168.1.246 {Jboss server ip}
iii. worker.tomcat3.host=192.168.1.246 {Jboss server ip}

8. Restart Apache and type URL with apache server ip
(https://192.168.1.46/testapp/Server.jsp) {Here ip address is of Apache server }

No comments: