Payara Configuration in QPR UI - Revision history

Ollvihe: /* Changing Payara Administrator Password */

2019-12-23T12:30:40Z

Changing Payara Administrator Password

Ollvihe at 12:05, 23 December 2019

2019-12-23T12:05:36Z

Show changes

Ollvihe: Ollvihe moved page GlassFish Configuration in QPR UI to Payara Configuration in QPR UI without leaving a redirect

2019-12-23T12:03:27Z

Ollvihe moved page GlassFish Configuration in QPR UI to Payara Configuration in QPR UI without leaving a redirect

Ollvihe: /* Changing Database Connection Settings */

2019-12-23T11:57:31Z

Changing Database Connection Settings

Ollvihe: /* Change Glassfish Error Pages */

2019-12-23T11:57:06Z

Change Glassfish Error Pages

Ollvihe: /* Setting up SSL/HTTPS */

2019-12-23T11:56:34Z

Setting up SSL/HTTPS

Ollvihe: Undo revision 14963 by Ollvihe (talk)

2019-12-23T11:55:50Z

Undo revision 14963 by Ollvihe (talk)

Ollvihe: /* Importing SSL Certificate to Glassfish */

2019-12-23T11:55:09Z

Importing SSL Certificate to Glassfish

Ollvihe: /* Change Glassfish Error Pages */

2019-10-24T14:22:31Z

Change Glassfish Error Pages

Ollvihe: /* Change Glassfish Error Pages */

2019-10-24T14:21:51Z

Change Glassfish Error Pages

@@ Line 11: / Line 11: @@
 # Open [[Payara_Configuration_in_QPR_UI#Opening Payara Administration Console|Payara Administration Console]].
 # In the left side hierarchy, click '''Domain''' -> '''Administrator Password''', define a new password twice and click '''Save'''.
 == Database Connection Settings ==

@@ Line 12: / Line 12: @@
 # In the left side hierarchy, click '''Domain''' -> '''Administrator Password''', define a new password twice and click '''Save'''.
-== Changing Database Connection Settings ==
+== Database Connection Settings ==
 # Open [[GlassFish_Configuration_in_QPR_UI#Opening GlassFish Administration Console|GlassFish Administration Console]].
 # In the left side hierarchy, expand and open '''Resources''' -> '''JDBC''' -> '''JDBC Connection Pools''' -> '''EnticeSQLPool'''.

@@ Line 131: / Line 131: @@
 # To change either of the values, click on either '''Entice''' or '''EnticeServices''', input the new value to the '''Deployment Order''' field, and click '''Save'''.
-== Change Glassfish Error Pages ==
+== Customized Error Pages ==
 By default, GlassFish returns error pages for HTTP errors (such as 404 or 500), that reveals the web server to be a Glassfish which might not be desired from the security point of view. Follow these instructions to change GlassFish error pages to custom pages (which contents can be controlled):
 * 1. Create folder for the error pages, e.g. '''C:/GlassFishErrorPages/'''. (note that the path must not contain any spaces).

← Older revision		Revision as of 11:56, 23 December 2019
Line 159:		Line 159:

	Note that if [[Setting up IIS as Reverse Proxy for QPR UI\|using IIS as a Reverse Proxy for QPR UI]], custom error pages also need to be configured to IIS (more information: https://blogs.msdn.microsoft.com/webtopics/2008/05/27/iis-7-0-http-error-pages/).		Note that if [[Setting up IIS as Reverse Proxy for QPR UI\|using IIS as a Reverse Proxy for QPR UI]], custom error pages also need to be configured to IIS (more information: https://blogs.msdn.microsoft.com/webtopics/2008/05/27/iis-7-0-http-error-pages/).
−
−	~~== Setting up SSL/HTTPS ==~~
−	~~There are two alternatives for setting up SSL/HTTPS connection:~~
−	* Route Traffic Through IIS: This is the recommended way, because it's easier to maintain than SSL configuration in GlassFish. See [[Routing Through IIS in QPR UI]] and configure the SSL sertificate in IIS.
−	* SSL Configuration in GlassFish: SSL can be configured to GlassFish. For that, follow the instruction below.
−
−	~~Note that the instructions assume that your SSL certificate is in the .pfx format. For other formats some commands have to be altered accordingly.<br>~~
−
−	~~# Make sure your Java JRE bin folder is in the [https://www.java.com/en/download/help/path.xml environment's PATH setting], so that keytool will be found.~~
−	# Launch two command prompts with administrator rights, navigate one to '''<QPR UI installation root>\Glassfish\bin''' and the other to '''<QPR UI installation root>\Glassfish\glassfish\domains\domain1\config'''.
−	~~# Make backup copies of '''keystore.jks''', '''cacerts.jks''' and '''domain.xml''' in '''<QPR UI installation root>\Glassfish\glassfish\domains\domain1\config'''.~~
−	~~# Open Glassfish Administration Console at '''http://<hostname>:4848'''. If you haven't done so, change the administrator password. Use a password longer than six characters.~~
−	# In Glassfish Administration Console , go to '''Server (Admin Server)''' -> '''Secure Administration''' -> '''Enable secure administration'''. Note that at this point the secure admin will still be using a self-signed certificate, which will cause warnings in browsers. As we know the reason for the warning, we can ignore it this time and proceed to the secure administration despite the certificate error.
−	~~# Stop the domain from the server (Admin Server) page or by running the following command line in the bin folder:~~
−	~~#: <pre>asadmin stop-domain</pre>~~
−	~~# With the command line in the bin folder, run:~~
−	#: <pre>asadmin change-master-password --savemasterpassword=true</pre> and define a new password to replace the default "changeit" password. NOTE: This should be a different password than the admininistrator password used for regular logins. This is basically a master key to the installation and also the certificate will be using this password in a later stage, so choose an appropriately strong password that is known only by those who have access to the SSL certificate password.
−	~~# Change to the command line in the config folder. Run:~~
−	#: <pre>keytool -importkeystore -srckeystore <your_pfx_file_name_and_path> -srcstoretype pkcs12 -destkeystore keystore.jks -deststoretype JKS</pre> You'll be asked for the destination keystore password, input the password defined in previous step here. Use the same password when you're asked to re-enter the new password. Source keystore password is your SSL certificate's password. Copy the alias to e.g. Notepad, you'll be needing this later.
−	~~# In the config folder, import the certificate also to the cacerts.jks keystore, i.e. run:~~
−	~~#: <pre>keytool -importkeystore -srckeystore <your_pfx_file_name_and_path> -srcstoretype pkcs12 -destkeystore cacerts.jks -deststoretype JKS</pre>~~
−	~~# In the config folder, run the following commands:~~
−	~~#:<pre>keytool -keypasswd -alias <key alias from step 8></pre>~~
−	~~#:<pre>-keystore keystore.jks keytool -keypasswd -alias <key alias from step 8> -keystore cacerts.jks</pre>~~
−	#: You're asked for the keystore password, this is once again the password defined in step 7. When the key password is requested, enter the original SSL certificate password and then enter the password from step 7 as the new key password.
−	~~# Start the domain by running the following command line in the bin folder:~~
−	~~#: <pre>asadmin start-domain</pre>~~
−	~~# Open [[GlassFish_Configuration_in_QPR_UI#Opening GlassFish Administration Console\|GlassFish Administration Console]].~~
−	~~# Expand and open '''Configurations''' -> '''server-config''' -> '''Network Config''' -> '''Network Listeners''' -> '''http-listener-2'''.~~
−	~~# Switch to the SSL tab and enable SSL3. Also change Certificate nickname to be the alias from step 8 and save the changes.~~
−	~~# You can now also disable http-listener-1 to prevent access without SSL, but that is safer to do after you have verified that the SSL config works.~~
−	# Stop the domain and open '''<QPR UI installation root>\Glassfish\glassfish\domains\domain1\config\domain.xml''' into a text editor that's running as an administrator. Search and replace all references to s1as with the alias from step 8.
−	~~# Save the file and restart the domain. You should now be able to access the SSL instance at '''https://<servername>:8181/ui/'''.~~

	== Importing SSL Certificate to Glassfish ==		== Importing SSL Certificate to Glassfish ==

@@ Line 192: / Line 192: @@
 # Stop the domain and open '''<QPR UI installation root>\Glassfish\glassfish\domains\domain1\config\domain.xml''' into a text editor that's running as an administrator. Search and replace all references to s1as with the alias from step 8.
 # Save the file and restart the domain. You should now be able to access the SSL instance at '''https://<servername>:8181/ui/'''.
 [[Category: QPR UI]]

← Older revision	Revision as of 12:03, 23 December 2019
(No difference)

@@ Line 156: / Line 156: @@
 * 4. Restart GlassFish from Windows Services.
-* 5. Test that the error pages work. For example to get the 404 error, try a path that doesn't exist.
+* 5. Test that the error pages work. For example, to get the 404 error, try a url that doesn't exist in the server.
 Note that if [[Setting up IIS as Reverse Proxy for QPR UI|using IIS as a Reverse Proxy for QPR UI]], custom error pages also need to be configured to IIS (more information: https://blogs.msdn.microsoft.com/webtopics/2008/05/27/iis-7-0-http-error-pages/).

← Older revision		Revision as of 14:21, 24 October 2019
Line 156:		Line 156:

	* 4. Restart GlassFish from Windows Services.		* 4. Restart GlassFish from Windows Services.
		+	* 5. Test that the error pages work. For example to get the 404 error, try a path that doesn't exist.
		+
		+	Note that if [[Setting up IIS as Reverse Proxy for QPR UI\|using IIS as a Reverse Proxy for QPR UI]], custom error pages also need to be configured to IIS (more information: https://blogs.msdn.microsoft.com/webtopics/2008/05/27/iis-7-0-http-error-pages/).

	== Setting up SSL/HTTPS ==		== Setting up SSL/HTTPS ==