Re: [Opaltoolkit-users] Opal security question

[Guillermo M. P. <gui...@si...>]

Hello,

I've managed to secure my whole Tomcat server with HTTPS with user 
certificate.
It's working awesome !

Connection is required in port 8443 and also asks user for certificate 
when trying to access website.

The problem I got now is that I cannot deploy Opal apps.
I didn't change any of my app *.xml or *.sh that have been working for 
some time.

As I said I just changed Tomcat security.

I've edited the following parameters in config files in Opal, but still 
cannot deploy my app.

*build.properties:*

# port number used by the tomcat server
tomcat.port = 8443


*opal.properties:*

tomcat.url=https://1xx.19.0.12:8443


I've added the same connector i'm already using (working) on tomcat 
config to my tomcat opal config, *server.xml:*

      <Connector
                 protocol="HTTP/1.1"
                 port="8443" maxThreads="200"
                 scheme="https" secure="true" SSLEnabled="true"
                 keystoreFile="/home/mastablasta/tomcat7/conf/tomcat.keystore" keystorePass="passsword"
                 truststoreFile="/home/mastablasta/tomcat7/conf/cacerts.jks" truststorePass="password"
                 clientAuth="true" sslProtocol="TLS"/>

When I deploy app i'm getting a build succesfull message, but that's not 
true. It seems that it must be an issue with connection to app database. 
I think it must be something arround https or connector.

URL with complete log of ant deploy command: http://pastebin.com/A5wv80BZ


Thank you !

Best regards,
Guillermo.


On 03/08/13 02:44, Luca Clementi wrote:
> On Thu, Mar 7, 2013 at 12:10 AM, Guillermo Marco Puche
> <gui...@si...> wrote:
>> Hello Luca,
>>
>> I've already tried to install Globus with no success. From my pov the guide
>> on Globus toolkit website is very confusing. I'm looking for an alternative
>> guide/tutorial for Globus 5+ but I can't find any.
>>
> I'm not surprised (Globus is always a pain to install).
> You can try using self signed certificate
> http://stackoverflow.com/questions/1180397/tomcat-server-client-self-signed-ssl-certificate
>
> You will get the same as with globus but with less problem.
>
> Moreover I never tested the globus libraries in tomcat 6/7 they might not work.
>
> Luca


-- 
<http://i.imgur.com/1MjpCpe.png> *g.marco*: Informatician at Sistemas 
Genómicos S.L <#>
phone: 0034635197460 <callto:0034635197460>
web: www.sistemasgenomicos.com <http://www.sistemasgenomicos.com>