Re: Configuring HTTPS for UI

2020-08-05 Thread nux
Hi, I've found it much easier to just put Apache httpd in front and do SSL there then proxy to Jetty, ie with the following code in the vhost config: AddDefaultCharset Off ProxyPass /client http://localhost:8080/client ProxyPassReverse /client http://localhost:8080/client HTH On 2020-08-0

Re: Configuring HTTPS for UI

2020-08-05 Thread Andrija Panic
Hi Mike, not sure what to docs say (haven't read that part recently), but the blog page should suffice (well, I see that github issue with 4.14 and SSL - haven't tested myself, so can't confirm/deny the issue). Just follow the blog page (no direct jetty modification needed) - and let us know if t

RE: Configuring HTTPS for UI

2020-08-05 Thread Corey, Mike
Thanks Andrija, I came across that link in my search, but the Jetty link in the instructions takes me to a page that says the version is End of Life. I wasn't sure if the Jetty piece had to be configured or I just had to do the CloudStack portion. Do I have to modify the Jetty piece as descr

Re: Configuring HTTPS for UI

2020-08-05 Thread Andrija Panic
Hi Mike, in production, you might want to do the SSL offloading on the load balancer, but yes, you can also setup SSL on the Jetty as well - please see the article https://www.shapeblue.com/securing-cloudstack-4-11-with-https-tls/ (skip the first part which describes securing system VMs with SSL)