2

How can I secure tomcat's application manager with ssl ? I already have the certificates for the site.

Thanks

3 Answers 3

1

Define the admin app inside a SSL connector.

http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html

3

You could try adding user-data-constraints in tomcat manager's web.xml. That might do the trick:

<user-data-constraint>
  <transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>

Maybe insert them before the /security-contraint closing tag in the HTML Manager commands section of that web.xml:

1

you can use nginx or apache in front of your tomcat to control access easily.

2

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .