Hi all,

Thanks a lot for the suggestions.

It was very useful and we made the changes as suggested. But still it did
not work.

Then we found out that along with the suggested change in the server.xml, we
had to add the below code to the web.xml file in the same folder

<security-constraint>
<web-resource-collection>
<web-resource-name>Entire Application</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>

After this, the SSL started working. 


Now it is working and no change for the end users as even if they type
"http", it is automatically redirecting to https.

Thanks a lot for the immediate response and it was very useful. 
I think we should put these guidelines in our mifos.org documentation as it
is very useful for any mifos implementation.
What do you say?

Regards,

-----Original Message-----
From: Lassaad Ben Hadj [mailto:[email protected]] 
Sent: 20 May 2009 17:10
To: [email protected]
Subject: Re: [Mifos-users] Need help regarding SSL implementation

Hi Naganda,
All you need is to uncomment the SSL definition in the server.xml
file :
the SSL definition looks like the lines below:

<Connector port="8443" minSpareThreads="5" maxSpareThreads="75"
enableLookups="true" disableUploadTimeout="true" acceptCount="100"
maxThreads="200" scheme="https" secure="true" SSLEnabled="true"
keystoreFile="/home/user/.keystore" keystorePass="yourpass"
clientAuth="false" sslProtocol="TLS" />

then change default values by your custom ones especially for the
keystoreFile and the kesystorePass.

Regards
Lassâad Ben Hadj
enda inter-arabe

On May 19, 11:24 am, "Nagananda Kumar" <[email protected]>
wrote:
> Hi all,
>
> I am glad to introduce myself to the list.
>
> I had a question regarding the SSL implementation. As we are implementing
> the same at GK.
>
> The certificate installation has been complete in the java.
>
> But we do not know the changes to be made in the tomcat to start using
SSL.
> The SSL implementation team from the vendor [Verisign] had been saying it
Is
> easy but now they are unable to do this successfully.
>
> We assume that some configuration changes have to be made in the
server.xml
> file in tomcat. We need help on setting up tomcat for using SSL. Also how
do
> we redirect the user to https incase he uses http for accessing mifos.
>
> I believe SSL implementation has been done in ENDA
>
> Can somebody help us out.
>
> Regards,
>
> Nagananda Kumar. K.N
>
> Asst. General Manager [Information Technology]
>
> Grameen Financial Services Pvt. Ltd
>
> Avalahalli, Anjanapura Post,
>
> Bangalore
>
> Karnataka
>
> India
>
> PinCode: 560062
>
> Ph: 080-28436237, Fax: 080 28436577
>
> Mob: 9845104252
>
> Email:[email protected]
>
>             [email protected]
>
> Website:www.grameenkoota.org
>
>
---------------------------------------------------------------------------­
---
> Crystal Reports - New Free Runtime and 30 Day Trial
> Check out the new simplified licensing option that enables
> unlimited royalty-free distribution of the report engine
> for externally facing server and web
deployment.http://p.sf.net/sfu/businessobjects
>
> _______________________________________________
> Mifos-users mailing list
>
[email protected]https://lists.sourceforge.net/lists/listinf
o/mifos-users

----------------------------------------------------------------------------
--
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables 
unlimited royalty-free distribution of the report engine 
for externally facing server and web deployment. 
http://p.sf.net/sfu/businessobjects
_______________________________________________
Mifos-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mifos-users


------------------------------------------------------------------------------
Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT
is a gathering of tech-side developers & brand creativity professionals. Meet
the minds behind Google Creative Lab, Visual Complexity, Processing, & 
iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian
Group, R/GA, & Big Spaceship. http://www.creativitycat.com 
_______________________________________________
Mifos-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mifos-users

Reply via email to