Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

How can I secure tomcat's application manager with ssl ? I already have the certificates for the site.

Thanks

share|improve this question

3 Answers 3

up vote 1 down vote accepted

Define the admin app inside a SSL connector.

http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html

share|improve this answer

you can use nginx or apache in front of your tomcat to control access easily.

share|improve this answer
    
I tried with apache and mod_proxy, but when it redirects to the manager app it goes plain-text. –  xain Feb 27 '11 at 14:58
    
check this: confluence.atlassian.com/display/DOC/… –  aligot May 3 '11 at 12:19

You could try adding user-data-constraints in tomcat manager's web.xml. That might do the trick:

<user-data-constraint>
  <transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>

Maybe insert them before the /security-contraint closing tag in the HTML Manager commands section of that web.xml:

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.