If you want to use HTTPS in your BellaDati instance You have to:
Prepare and load private key and the certificate into a keystore
You can follow these instructions to prepare JSSE keystore with private key and the signed certificate.
Configure SSL in server.properties
Open the server configuration file server.properties and set following SSL parameters for BellaDati and Jetty's SslContextFactory
:
Parameter name | Description | Example |
---|---|---|
server.ssl | Boolean flag if the SSL should be used | true |
server.ssl.port | SSL port | 8443 |
server.ssl.keystore.path | Full path to your keystore file. Note that as a keystore is vital security information, it can be desirable to locate the file in a directory with very restricted access. | /Applications/BellaDati/keystore |
server.ssl.keystore.password | The KeyStore password may be set here in plain text | |
server.ssl.keymanagerpassword | The KeyManager password may be set here in plain text | |
server.ssl.truststore.path | Full path to your trust store | /Applications/BellaDati/keystore |
server.ssl.truststore.password | The TrustStore password may be set here in plain text | |
server.ssl.certalias | Alias of a certificate to use. Please be sure you are using PrivateKeyEntry alias from keystore. You can use keytool to list entries: keytool -list -keystore path/to/my/keystore | my_alias |
Configure SSL in application.properties
(Optional) If you want to enforce all pages to be opened using SSL, then open the application configuration file application.properties and set following parameter for BellaDati:
Parameter name | Description | Example |
---|---|---|
application.secure-mode | Determines whether BellaDati is running in SSL/TLS mode. If set to true , the application enforces all pages to be opened using SSL. | true |
Restart server
Restart server and point your browser to https://localhost:8443/ to access your BellaDati instance.
Configure application URL
(Optional) Login as admin to BellaDati and go to Settings page. Please set value of general property called Application URL to https://localhost:8443