How to enforce RTC only by HTTPS, and disable HTTP access?
It seems although jazz redirect all access to HTTPs, but the HTTP access is still valid to image, js and service invocation. Is there any approach to disable HTTP? I understand there might be different app server (tomcat, was), is there any centralized approach that jazz can provide?
|
2 answers
It seems although jazz redirect all access to HTTPs, but the HTTP access is still valid to image, js and service invocation. Is there any approach to disable HTTP? I understand there might be different app server (tomcat, was), is there any centralized approach that jazz can provide? any feedback? |
I don't know if it's correct but: RTC is based on Tomcat and with this application server you can bind/disable the HTTP port from configuration.
If you want to use the HTTP port only from localhost/127.0.0.1 you can add "address" property in the server.xml as reported here: http://tomcat.apache.org/tomcat-6.0-doc/config/http.html In the HTTP section of connector add address="127.0.0.1" and the HTTP port respond only to local connections. Hope this help
|
Your answer
Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.