HTTPS for EP
Can someone tell me how to disable HTTP port at EP & force users to use HTTPS port?
About HTTPS, which is the simplest way to implement this? do I have a CA server to support SSL certificate? Can I use a windows CA server for this? ...
Desiree Matas replied
Hi Toan Do
As far as I know the only way to disable the HTTP while keeping HTTPS is to configure an invalid value for the http port.
But you can disable http access on a per application basis. This way when a user tries to access an application via http, he will be redirected automatically to the https port, so again no http access will be possible.
To do that, you need to add an entry to the web.xml file of the application you want to secure. Por the portal it will be located in:
where UME_app_alias is the http alias through which you access the UME application.
You need to be careful when making these changes as the security constraint has a specific place in the descriptor, check which is it in the dtd.
I hope this info is useful.