Turning on Mutual SSL in Tomcat

john.crupi
john.crupi's picture
User offline. Last seen 3 weeks 5 days ago. Offline
Joined: 09/19/2008
Points: 140

It's quite simple to turn on mutual SSL in Presto if deployed in Tomcat.

First, in the /conf directory, you find the server.xml file.

Edit it and add (or uncomment) the section:

    Connector port="8443" maxHttpHeaderSize="8192"
              maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
              enableLookups="false" disableUploadTimeout="true"
              acceptCount="100" scheme="https" secure="true"
              clientAuth="true" sslProtocol="TLS"
              keystoreFile="conf/tomcat.keystore" keystorePass="password"
             truststoreFile="conf/tomcat.keystore" truststorePass="password"

Make sure you want SSL to listen on 8443, else change it. Also, make sure the keystoreFile and truststoreFile point to the appropriate files.

Lastly, you'll have to have a X.509 Cert installed in your browser.

To test, type https://localhost:8443/presto

0
Your rating: None