How to secure tomcat's manager with ssl

Question

How can I secure tomcat's application manager with ssl ? I already have the certificates for the site.

Thanks

gtirloni · Answer 1 · 2011-03-07 01:37:45Z

up vote 1 down vote accepted

Define the admin app inside a SSL connector.

answered Mar 7 '11 at 1:37

gtirloni
1,273210

feedback

aligot · Answer 2 · 2011-02-25 12:37:18Z

up vote 1 down vote

you can use nginx or apache in front of your tomcat to control access easily.

answered Feb 25 '11 at 12:37

	I tried with apache and mod_proxy, but when it redirects to the manager app it goes plain-text. – xain Feb 27 '11 at 14:58
	check this: confluence.atlassian.com/display/DOC/… – aligot May 3 '11 at 12:19

feedback

mahnsc · Answer 3 · 2011-03-06 22:00:11Z

You could try adding user-data-constraints in tomcat manager's web.xml. That might do the trick:

<user-data-constraint>
  <transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>

Maybe insert them before the /security-contraint closing tag in the HTML Manager commands section of that web.xml:

3 Answers