Re: OFBiz configuration on production site

[Jacques Le Roux]

Hi Katie ,

Your message has been moderated (again, twice :D), else it would not have 
reached this Mailing List.

Please subscribe to the user ML for such questions and then use your email 
client.
See why here http://ofbiz.apache.org/mailing-lists.html.

You will get a better support, people can answer you on the ML.
The wider the audience the better the answers you might get.

Seriously  ;)

Thanks

Jacques

Le 13/07/2020 à 09:10, Katie Qiu a écrit :

Hi Pierre, Jacques and Michael,

I want to thank you all again. I am finally able to make OFBiz on Windows 
Server work with SSL  Let's encrypt and Apache. I couldn't have done it without 
your support :-)

Now I am facing a new problem on production: Please check my website: 
https://www.polluniverse.com/

You will see the page shows as below:
Index of /
apache-ofbiz-17.12.03/
webapp/

When visiting  https://www.polluniverse.com/webapp/ecommerce/ I expect I should 
see the index.jsp page in the folder, but I see the source code of the 
index.jsp page
I have done the following
1.  Put the following in HTTPD

 DirectoryIndex index.jsp


2.  apache-ofbiz-17.12.03 and webapp are two folders. These two folders are 
located
at SITEROOT "C:/apache24/htdocs/www/polluniverse.com"

A.  apache-ofbiz-17.12.03 is the project folder (what I downloaded from 
Ofbiz website).

B.  webapp is from folder at 
C:\Apache24\htdocs\www\polluniverse.com\apache-ofbiz-17.12.03\plugins\ecommerce\webapp
 and I copy it to SITEROOT C:/apache24/htdocs/www/polluniverse.com"

C.  In ofbiz-component.xml, I change the "mount-point" attribute on that tag to 
""


I'm not sure if I have moved the ecommerce webapp folder correctly or not. The 
reason I did it is because I read about Mounting a Root WebApp from the OFBiz 
Production Setup page.

Re: OFBiz configuration on production site

[Michael Brohl]

Hi Katie,

can you provide your Apache virtual host configuration with the AJP 
settings?


Thanks,

Michael


Am 13.07.20 um 09:10 schrieb Katie Qiu:

Hi Pierre, Jacques and Michael,

I want to thank you all again. I am finally able to make OFBiz on Windows 
Server work with SSL  Let's encrypt and Apache. I couldn't have done it without 
your support :-)

Now I am facing a new problem on production: Please check my website: 
https://www.polluniverse.com/

You will see the page shows as below:
Index of /
apache-ofbiz-17.12.03/
webapp/

When visiting  https://www.polluniverse.com/webapp/ecommerce/ I expect I should 
see the index.jsp page in the folder, but I see the source code of the 
index.jsp page
I have done the following
1.  Put the following in HTTPD

 DirectoryIndex index.jsp


2.  apache-ofbiz-17.12.03 and webapp are two folders. These two folders are 
located
at SITEROOT "C:/apache24/htdocs/www/polluniverse.com"

A.  apache-ofbiz-17.12.03 is the project folder (what I downloaded from 
Ofbiz website).

B.  webapp is from folder at 
C:\Apache24\htdocs\www\polluniverse.com\apache-ofbiz-17.12.03\plugins\ecommerce\webapp
 and I copy it to SITEROOT C:/apache24/htdocs/www/polluniverse.com"

C.  In ofbiz-component.xml, I change the "mount-point" attribute on that tag to 
""


I'm not sure if I have moved the ecommerce webapp folder correctly or not. The 
reason I did it is because I read about Mounting a Root WebApp from the OFBiz 
Production Setup page.





smime.p7s
Description: S/MIME Cryptographic Signature

Re: OFBiz configuration on production site

[Katie Qiu]

Hi Pierre, Jacques and Michael,

I want to thank you all again. I am finally able to make OFBiz on Windows 
Server work with SSL  Let's encrypt and Apache. I couldn't have done it without 
your support :-)

Now I am facing a new problem on production: Please check my website: 
https://www.polluniverse.com/

You will see the page shows as below:
Index of /
apache-ofbiz-17.12.03/
webapp/

When visiting  https://www.polluniverse.com/webapp/ecommerce/ I expect I should 
see the index.jsp page in the folder, but I see the source code of the 
index.jsp page
I have done the following 
1.  Put the following in HTTPD

DirectoryIndex index.jsp


2.  apache-ofbiz-17.12.03 and webapp are two folders. These two folders are 
located
at SITEROOT "C:/apache24/htdocs/www/polluniverse.com"

A.  apache-ofbiz-17.12.03 is the project folder (what I downloaded from 
Ofbiz website).

B.  webapp is from folder at 
C:\Apache24\htdocs\www\polluniverse.com\apache-ofbiz-17.12.03\plugins\ecommerce\webapp
 and I copy it to SITEROOT C:/apache24/htdocs/www/polluniverse.com"

C.  In ofbiz-component.xml, I change the "mount-point" attribute on that 
tag to ""


I'm not sure if I have moved the ecommerce webapp folder correctly or not. The 
reason I did it is because I read about Mounting a Root WebApp from the OFBiz 
Production Setup page. 

RE: OFBiz configuration on production site

[Katie Qiu]

Hi Pierre, Jacques and Michael,

 

I appreciate you all taking the time to answer my questions. I will certainly 
check into them.

 

Thanks again,

Katie

 

From: Pierre Smits [mailto:pierresm...@apache.org] 
Sent: Saturday, June 27, 2020 12:33 AM
To: user@ofbiz.apache.org; Katie Qiu 
Subject: Re: OFBiz configuration on production site

 

HI Katie,

My apologies for you having to restate your issues several times.

 

That you have the basics in play (Your OFBiz implementation set up, running and 
accessible via 8443) is a good thing, and now you're nearly there.

 

Please see inline for further comments.

I trust the information below helps.

 

However, should you still experience issues, please feel free to reach out.

 




Met vriendelijke groet,

 

Pierre Smits

Proud contributor of  <https://ofbiz.apache.org/> Apache OFBiz since 2008 
(without privileges)

 

Apache Trafodion <https://trafodion.apache.org> , Vice President

Apache Directory <https://directory.apache.org> , PMC Member

Apache Incubator <https://incubator.apache.org> , committer

Apache Steve <https://steve.apache.org> , committer

 

 

On Fri, Jun 26, 2020 at 9:30 AM Katie Qiu mailto:katie_...@polluniverse.com> > wrote:

Hi,

I'm new to OFBiz, Please check the steps I have taken and pointed out what I
miss because it's not working on production site



1. I was able to make it work on localhost. I'm also able to access data
that came with the project (ex:
<https://localhost:8443/webtools/control/entitymaint>
https://localhost:8443/webtools/control/entitymaint) 



This is the easy part. Kudos

 


2. I installed SSL Certificate in Microsoft IIS for the project on
production site my Windows Server 2012 (I was able to access
<https://www.mywebsitedomain.com/> https://www.mywebsitedomain.com now) 



a.  I use virtual private server from IONOS and it provides me a free SSL. I
imported .PFX file provided from IONOS, then the domain can be accessed as
https 



b. As you suggested, I looked into  <https://letsencrypt.org/>
https://letsencrypt.org/, but I didn't see any .PFX file neither other
certificate files that IONOS provided me (on the OFBiz Product Setup page,
it shows .cer files (which I also got from IONOS) is used to enter Keystore.
Maybe I missed something. For now, I use SSL from IONOS, but if you think I
should use Let's encrypt, then please let me know if have to have the .PFX
and cer files



Using ssl certificates from Letsencrypt for the web server is, when using web 
servers like Apache HTTPD and NGINX straight forward. However, I don't know how 
that works for IIIS. Maybe their documentation will tell.

 

 


3. I installed Apache 24 on Windows server as well. I was able to access
localhost and see the index page showing "it works"

Great, the second step of the combination Apache HTTPD - Apache OFBiz is now 
concluded.

 

As said earlier, setting up Letsencrypt for Apache HTTPD is straight forward. 
Please look at the documentation there. If set up properly, you will get:

*   the Apache HTTPD starter page accessible via: https:// 
<https://%3cyourIpAddress%3e/> / or e.g. https://localhost/

If done correctly you'll see in (one of) your HTTPD config files (some of) 
following lines appear:

SSLEngine on

Include /etc/letsencrypt/options-ssl-apache.conf

SSLCertificateFile /etc/letsencrypt/live/TheFQDOfYourDomain>/cert.pem

SSLCertificateKeyFile /etc/letsencrypt/live/TheFQDOfYourDomain>/privkey.pem

SSLCertificateChainFile /etc/letsencrypt/live/TheFQDOfYourDomain>/chain.pem

 

The only thing now to do is to tie your Apache HTTPD implementation to your 
Apache OFBiz implementation.

 

Please have a look at following setup in my Apache HTTP configuration for the 
oem.ofbizci.net <http://oem.ofbizci.net>  site:

 



ServerName oem.ofbizci.net <http://oem.ofbizci.net> 

DocumentRoot /var/www/html

Redirect permanent / https://www.ofbizci.net/

 

ErrorLog /proglog/ofbizci/error.log

CustomLog /proglog/ofbizci/access.log combined



 



ServerName oem.ofbizci.net <http://oem.ofbizci.net> 

 

SSLEngine on

Include /etc/letsencrypt/options-ssl-apache.conf

SSLCertificateFile /etc/letsencrypt/live/ofbizci.net/cert.pem 
<http://ofbizci.net/cert.pem> 

SSLCertificateKeyFile /etc/letsencrypt/live/ofbizci.net/privkey.pem 
<http://ofbizci.net/privkey.pem> 

SSLCertificateChainFile /etc/letsencrypt/live/ofbizci.net/chain.pem 
<http://ofbizci.net/chain.pem> 

ProxyRequests Off

ProxyPreserveHost On

 

proxyPass / ajp://10.0.0.22:8009/ <http://10.0.0.22:8009/> 

ProxyPassReverse / ajp://10.0.0.22:8009/ <http://10.0.0.22:8009/> 

 

ErrorLog /proglog/ofbizci/oem-ofbizci-net-ssl-error.log

CustomLog /proglog/ofbizci/oem-ofbizci-net-ssl-access.log combined

Re: OFBiz configuration on production site

[Michael Brohl]

Hi Katie,

please refer to our Wiki: 
https://cwiki.apache.org/confluence/display/OFBIZ/FAQ+-+Tips+-+Tricks+-+Cookbook+-+HowTo#FAQTipsTricksCookbookHowTo-HTTPD


If you use the Apache Webserver you don't need to bother with the Tomcat 
keystore.


HTH,

Michael Brohl

ecomify GmbH - www.ecomify.de


Am 26.06.20 um 09:30 schrieb Katie Qiu:

Hi,

I'm new to OFBiz, Please check the steps I have taken and pointed out what I
miss because it's not working on production site

  


1. I was able to make it work on localhost. I'm also able to access data
that came with the project (ex:

https://localhost:8443/webtools/control/entitymaint)

  


2. I installed SSL Certificate in Microsoft IIS for the project on
production site my Windows Server 2012 (I was able to access
 https://www.mywebsitedomain.com now)

  


a.  I use virtual private server from IONOS and it provides me a free SSL. I
imported .PFX file provided from IONOS, then the domain can be accessed as
https

  


b. As you suggested, I looked into  
https://letsencrypt.org/, but I didn't see any .PFX file neither other
certificate files that IONOS provided me (on the OFBiz Product Setup page,
it shows .cer files (which I also got from IONOS) is used to enter Keystore.
Maybe I missed something. For now, I use SSL from IONOS, but if you think I
should use Let's encrypt, then please let me know if have to have the .PFX
and cer files

  


3. I installed Apache 24 on Windows server as well. I was able to access
localhost and see the index page showing "it works"

  


4. I have edited "keystoreFile" and "KeyPass" in ofbiz-component  at
apache-ofbiz-17.12.03\framework\catalina



 

 

 

  


5.  I then tried to follow  
https://s.apache.org/vmemj and edit httpd.conf file and httpd-ssl.conf, but
when trying to Start Apache 24, it gives me some error messages (I got no
error before editing the two files).

a.  I have edited ofbiz-containers.xml and url.properties file (change 8080
to 80 and 8443 to 443)

b. For httpd.conf: not recognizing some words like "RewriteEngine On"
"Order"

c. For httpd-ssl.conf, for example, I get error "AH00526: Syntax error on
line 177 of c:/Apache24/conf/extra/httpd-ssl.conf: SSLCertificate KeyFile:
file 'c:/Apache24/conf/server.key' does not exit or is empty"  - It's true,
I don't have such file, but I'm not sure where I can get it.

  


Thank you very much  in advance

Katie

  







smime.p7s
Description: S/MIME Cryptographic Signature

Re: OFBiz configuration on production site

[Pierre Smits]

The only other one caring, Jacques?

Op za 27 jun. 2020 10:24 schreef Jacques Le Roux <
jacques.le.r...@les7arts.com>:

> Thanks Pierre for the help!
>
> Jacques
>
> Le 27/06/2020 à 09:32, Pierre Smits a écrit :
> > HI Katie,
> > My apologies for you having to restate your issues several times.
> >
> > That you have the basics in play (Your OFBiz implementation set up,
> running
> > and accessible via 8443) is a good thing, and now you're nearly there.
> >
> > Please see inline for further comments.
> > I trust the information below helps.
> >
> > However, should you still experience issues, please feel free to reach
> out.
> >
> >
> > Met vriendelijke groet,
> >
> > Pierre Smits
> > *Proud* *contributor** of* Apache OFBiz 
> since
> > 2008 (without privileges)
> >
> > *Apache Trafodion , Vice President*
> > *Apache Directory , PMC Member*
> > Apache Incubator , committer
> > Apache Steve , committer
> >
> >
> > On Fri, Jun 26, 2020 at 9:30 AM Katie Qiu 
> > wrote:
> >
> >> Hi,
> >>
> >> I'm new to OFBiz, Please check the steps I have taken and pointed out
> what
> >> I
> >> miss because it's not working on production site
> >>
> >>
> >>
> >> 1. I was able to make it work on localhost. I'm also able to access data
> >> that came with the project (ex:
> >> 
> >> https://localhost:8443/webtools/control/entitymaint)
> >>
> >>
> >> This is the easy part. Kudos
> >
> >> 2. I installed SSL Certificate in Microsoft IIS for the project on
> >> production site my Windows Server 2012 (I was able to access
> >>  https://www.mywebsitedomain.com now)
> >>
> >>
> >>
> >> a.  I use virtual private server from IONOS and it provides me a free
> SSL.
> >> I
> >> imported .PFX file provided from IONOS, then the domain can be accessed
> as
> >> https
> >>
> >>
> >>
> >> b. As you suggested, I looked into  
> >> https://letsencrypt.org/, but I didn't see any .PFX file neither other
> >> certificate files that IONOS provided me (on the OFBiz Product Setup
> page,
> >> it shows .cer files (which I also got from IONOS) is used to enter
> >> Keystore.
> >> Maybe I missed something. For now, I use SSL from IONOS, but if you
> think I
> >> should use Let's encrypt, then please let me know if have to have the
> .PFX
> >> and cer files
> >>
> >>
> >> Using ssl certificates from Letsencrypt for the web server is, when
> using
> > web servers like Apache HTTPD and NGINX straight forward. However, I
> don't
> > know how that works for IIIS. Maybe their documentation will tell.
> >
> >
> >
> >> 3. I installed Apache 24 on Windows server as well. I was able to access
> >> localhost and see the index page showing "it works"
> >>
> >> Great, the second step of the combination Apache HTTPD - Apache OFBiz is
> > now concluded.
> >
> > As said earlier, setting up Letsencrypt for Apache HTTPD is straight
> > forward. Please look at the documentation there. If set up properly, you
> > will get:
> >
> > - the Apache HTTPD starter page accessible via: https://
> /
> > or e.g. https://localhost/
> >
> > If done correctly you'll see in (one of) your HTTPD config files (some
> of)
> > following lines appear:
> >
> >  SSLEngine on
> >
> >  Include /etc/letsencrypt/options-ssl-apache.conf
> >
> >  SSLCertificateFile
> /etc/letsencrypt/live/TheFQDOfYourDomain>/cert.pem
> >
> >  SSLCertificateKeyFile /etc/letsencrypt/live/TheFQDOfYourDomain>
> > /privkey.pem
> >
> >  SSLCertificateChainFile /etc/letsencrypt/live/TheFQDOfYourDomain>
> > /chain.pem
> >
> >
> > The only thing now to do is to tie your Apache HTTPD implementation to
> your
> > Apache OFBiz implementation.
> >
> > Please have a look at following setup in my Apache HTTP configuration for
> > the oem.ofbizci.net site:
> >
> > 
> >
> >  ServerName oem.ofbizci.net
> >
> >  DocumentRoot /var/www/html
> >
> >  Redirect permanent / https://www.ofbizci.net/
> >
> >
> >  ErrorLog /proglog/ofbizci/error.log
> >
> >  CustomLog /proglog/ofbizci/access.log combined
> >
> > 
> >
> >
> > 
> >
> >  ServerName oem.ofbizci.net
> >
> >
> >  SSLEngine on
> >
> >  Include /etc/letsencrypt/options-ssl-apache.conf
> >
> >  SSLCertificateFile /etc/letsencrypt/live/ofbizci.net/cert.pem
> >
> >  SSLCertificateKeyFile /etc/letsencrypt/live/
> ofbizci.net/privkey.pem
> >
> >  SSLCertificateChainFile /etc/letsencrypt/live/
> ofbizci.net/chain.pem
> >
> >  ProxyRequests Off
> >
> >  ProxyPreserveHost On
> >
> >
> >  proxyPass / ajp://10.0.0.22:8009/
> >
> >  ProxyPassReverse / ajp://10.0.0.22:8009/
> >
> >
> >  ErrorLog /proglog/ofbizci/oem-ofbizci-net-ssl-error.log
> >
> >  CustomLog /proglog/ofbizci/oem-ofbizci-net-ssl-access.log combined
> 

Re: OFBiz configuration on production site

[Jacques Le Roux]

Thanks Pierre for the help!

Jacques

Le 27/06/2020 à 09:32, Pierre Smits a écrit :

HI Katie,
My apologies for you having to restate your issues several times.

That you have the basics in play (Your OFBiz implementation set up, running
and accessible via 8443) is a good thing, and now you're nearly there.

Please see inline for further comments.
I trust the information below helps.

However, should you still experience issues, please feel free to reach out.


Met vriendelijke groet,

Pierre Smits
*Proud* *contributor** of* Apache OFBiz  since
2008 (without privileges)

*Apache Trafodion , Vice President*
*Apache Directory , PMC Member*
Apache Incubator , committer
Apache Steve , committer


On Fri, Jun 26, 2020 at 9:30 AM Katie Qiu 
wrote:


Hi,

I'm new to OFBiz, Please check the steps I have taken and pointed out what
I
miss because it's not working on production site



1. I was able to make it work on localhost. I'm also able to access data
that came with the project (ex:

https://localhost:8443/webtools/control/entitymaint)


This is the easy part. Kudos



2. I installed SSL Certificate in Microsoft IIS for the project on
production site my Windows Server 2012 (I was able to access
 https://www.mywebsitedomain.com now)



a.  I use virtual private server from IONOS and it provides me a free SSL.
I
imported .PFX file provided from IONOS, then the domain can be accessed as
https



b. As you suggested, I looked into  
https://letsencrypt.org/, but I didn't see any .PFX file neither other
certificate files that IONOS provided me (on the OFBiz Product Setup page,
it shows .cer files (which I also got from IONOS) is used to enter
Keystore.
Maybe I missed something. For now, I use SSL from IONOS, but if you think I
should use Let's encrypt, then please let me know if have to have the .PFX
and cer files


Using ssl certificates from Letsencrypt for the web server is, when using

web servers like Apache HTTPD and NGINX straight forward. However, I don't
know how that works for IIIS. Maybe their documentation will tell.




3. I installed Apache 24 on Windows server as well. I was able to access
localhost and see the index page showing "it works"

Great, the second step of the combination Apache HTTPD - Apache OFBiz is

now concluded.

As said earlier, setting up Letsencrypt for Apache HTTPD is straight
forward. Please look at the documentation there. If set up properly, you
will get:

- the Apache HTTPD starter page accessible via: https:///
or e.g. https://localhost/

If done correctly you'll see in (one of) your HTTPD config files (some of)
following lines appear:

 SSLEngine on

 Include /etc/letsencrypt/options-ssl-apache.conf

 SSLCertificateFile /etc/letsencrypt/live/TheFQDOfYourDomain>/cert.pem

 SSLCertificateKeyFile /etc/letsencrypt/live/TheFQDOfYourDomain>
/privkey.pem

 SSLCertificateChainFile /etc/letsencrypt/live/TheFQDOfYourDomain>
/chain.pem


The only thing now to do is to tie your Apache HTTPD implementation to your
Apache OFBiz implementation.

Please have a look at following setup in my Apache HTTP configuration for
the oem.ofbizci.net site:



 ServerName oem.ofbizci.net

 DocumentRoot /var/www/html

 Redirect permanent / https://www.ofbizci.net/


 ErrorLog /proglog/ofbizci/error.log

 CustomLog /proglog/ofbizci/access.log combined






 ServerName oem.ofbizci.net


 SSLEngine on

 Include /etc/letsencrypt/options-ssl-apache.conf

 SSLCertificateFile /etc/letsencrypt/live/ofbizci.net/cert.pem

 SSLCertificateKeyFile /etc/letsencrypt/live/ofbizci.net/privkey.pem

 SSLCertificateChainFile /etc/letsencrypt/live/ofbizci.net/chain.pem

 ProxyRequests Off

 ProxyPreserveHost On


 proxyPass / ajp://10.0.0.22:8009/

 ProxyPassReverse / ajp://10.0.0.22:8009/


 ErrorLog /proglog/ofbizci/oem-ofbizci-net-ssl-error.log

 CustomLog /proglog/ofbizci/oem-ofbizci-net-ssl-access.log combined




In the configuration abovy, you'll see that the following:

 proxyPass / ajp://10.0.0.22:8009/

 ProxyPassReverse / ajp://10.0.0.22:8009/

The internal IpAddress 10.0.0.22 is where the OFBiz implementation
resides/runs. (my HTTPD web server and and my OFBiz application serverfor
oem.ofbizci.net run on different virtual machines). In your case, e.g. when
having both on 1 (virtual) machine this could b:

 proxyPass / ajp://localhost:8009/

 ProxyPassReverse / ajp://localhost:8009/

>From the lines you also get that I am using the ajp protocol. This is an
extension (mod) available with the Apache HTTPD product, but may require
some additional installation on your HTTPD implementation. See
documentation provided by 

Re: OFBiz configuration on production site

[Pierre Smits]

HI Katie,
My apologies for you having to restate your issues several times.

That you have the basics in play (Your OFBiz implementation set up, running
and accessible via 8443) is a good thing, and now you're nearly there.

Please see inline for further comments.
I trust the information below helps.

However, should you still experience issues, please feel free to reach out.


Met vriendelijke groet,

Pierre Smits
*Proud* *contributor** of* Apache OFBiz  since
2008 (without privileges)

*Apache Trafodion , Vice President*
*Apache Directory , PMC Member*
Apache Incubator , committer
Apache Steve , committer


On Fri, Jun 26, 2020 at 9:30 AM Katie Qiu 
wrote:

> Hi,
>
> I'm new to OFBiz, Please check the steps I have taken and pointed out what
> I
> miss because it's not working on production site
>
>
>
> 1. I was able to make it work on localhost. I'm also able to access data
> that came with the project (ex:
> 
> https://localhost:8443/webtools/control/entitymaint)
>
>
> This is the easy part. Kudos


>
> 2. I installed SSL Certificate in Microsoft IIS for the project on
> production site my Windows Server 2012 (I was able to access
>  https://www.mywebsitedomain.com now)
>
>
>
> a.  I use virtual private server from IONOS and it provides me a free SSL.
> I
> imported .PFX file provided from IONOS, then the domain can be accessed as
> https
>
>
>
> b. As you suggested, I looked into  
> https://letsencrypt.org/, but I didn't see any .PFX file neither other
> certificate files that IONOS provided me (on the OFBiz Product Setup page,
> it shows .cer files (which I also got from IONOS) is used to enter
> Keystore.
> Maybe I missed something. For now, I use SSL from IONOS, but if you think I
> should use Let's encrypt, then please let me know if have to have the .PFX
> and cer files
>
>
> Using ssl certificates from Letsencrypt for the web server is, when using
web servers like Apache HTTPD and NGINX straight forward. However, I don't
know how that works for IIIS. Maybe their documentation will tell.



>
> 3. I installed Apache 24 on Windows server as well. I was able to access
> localhost and see the index page showing "it works"
>
> Great, the second step of the combination Apache HTTPD - Apache OFBiz is
now concluded.

As said earlier, setting up Letsencrypt for Apache HTTPD is straight
forward. Please look at the documentation there. If set up properly, you
will get:

   - the Apache HTTPD starter page accessible via: https:///
   or e.g. https://localhost/

If done correctly you'll see in (one of) your HTTPD config files (some of)
following lines appear:

SSLEngine on

Include /etc/letsencrypt/options-ssl-apache.conf

SSLCertificateFile /etc/letsencrypt/live/TheFQDOfYourDomain>/cert.pem

SSLCertificateKeyFile /etc/letsencrypt/live/TheFQDOfYourDomain>
/privkey.pem

SSLCertificateChainFile /etc/letsencrypt/live/TheFQDOfYourDomain>
/chain.pem


The only thing now to do is to tie your Apache HTTPD implementation to your
Apache OFBiz implementation.

Please have a look at following setup in my Apache HTTP configuration for
the oem.ofbizci.net site:



ServerName oem.ofbizci.net

DocumentRoot /var/www/html

Redirect permanent / https://www.ofbizci.net/


ErrorLog /proglog/ofbizci/error.log

CustomLog /proglog/ofbizci/access.log combined






ServerName oem.ofbizci.net


SSLEngine on

Include /etc/letsencrypt/options-ssl-apache.conf

SSLCertificateFile /etc/letsencrypt/live/ofbizci.net/cert.pem

SSLCertificateKeyFile /etc/letsencrypt/live/ofbizci.net/privkey.pem

SSLCertificateChainFile /etc/letsencrypt/live/ofbizci.net/chain.pem

ProxyRequests Off

ProxyPreserveHost On


proxyPass / ajp://10.0.0.22:8009/

ProxyPassReverse / ajp://10.0.0.22:8009/


ErrorLog /proglog/ofbizci/oem-ofbizci-net-ssl-error.log

CustomLog /proglog/ofbizci/oem-ofbizci-net-ssl-access.log combined




In the configuration abovy, you'll see that the following:

proxyPass / ajp://10.0.0.22:8009/

ProxyPassReverse / ajp://10.0.0.22:8009/

The internal IpAddress 10.0.0.22 is where the OFBiz implementation
resides/runs. (my HTTPD web server and and my OFBiz application serverfor
oem.ofbizci.net run on different virtual machines). In your case, e.g. when
having both on 1 (virtual) machine this could b:

proxyPass / ajp://localhost:8009/

ProxyPassReverse / ajp://localhost:8009/

>From the lines you also get that I am using the ajp protocol. This is an
extension (mod) available with the Apache HTTPD product, but may require
some additional installation on your HTTPD implementation. See
documentation provided by the Apache HTTPD project.

When using that