dotCMS - Open Source Content Management System, Ondemand CMS, and Professional Support

Configure dotCMS to Run SSL

To enable dotCMS to serve pages over SSL or https, you need to enable a connector in conf/server.xml.  You will also need a valid SSL certificate in JKS format.  The format of the connector element in server.xml is:
<Connector
 port="443"
 protocol="HTTP/1.1"
 SSLEnabled="true"
 address="10.0.0.168"
 maxThreads="150"
 scheme="https"
 secure="true"
 clientAuth="false"
 sslProtocol="TLS"
 keystoreFile="C:\wwwroot\site\conf\ssl.key"
 keystorePass="XXXXX"
/>

Replace the address, keystoreFile, keystorePass with the corresponding
data.  To avoid problems, it is recommended to use an absolute path for the keystore.

You make sure that the keystore and password are valid using keytool like this:

"keytool -list -keystore ssl.key"

This command will list the certificates and keys if the password and keystore are valid.

If you want to make sure that it's working, you can "talk" to an https
webserver.  This is the ssl equivalent of using "telnet
10.0.0.161 80"

"openssl s_client -connect 10.0.0.161:443 -state"