RTC 3.0: disabling SSL
Is it still correct what's written in:
https://jazz.net/wiki/bin/view/Main/TestingWithReverseProxyWithoutSSL ?
That is I just need to:
- In the web.xml file, change all occurrences of CONFIDENTIAL to NONE (only for the jts application?)
-If you use Apache Tomcat, navigate to the Jazz-Team-Server-installation-directory/ server/tomcat/conf directory.
* Open the server.xml file in an editor. Remove the redirectPort attribute from the 9080 Connector element. Save the file.
Then I need to run again the setup wizard?
https://jazz.net/wiki/bin/view/Main/TestingWithReverseProxyWithoutSSL ?
That is I just need to:
- In the web.xml file, change all occurrences of CONFIDENTIAL to NONE (only for the jts application?)
-If you use Apache Tomcat, navigate to the Jazz-Team-Server-installation-directory/ server/tomcat/conf directory.
* Open the server.xml file in an editor. Remove the redirectPort attribute from the 9080 Connector element. Save the file.
Then I need to run again the setup wizard?
10 answers
That looks to be essentially the same as what the documentation says, in
http://publib.boulder.ibm.com/infocenter/clmhelp/v3r0/topic/com.ibm.jazz.install.doc/topics/t_disable_server_certificates.html
I don't think you need to run the setup wizard again. Unless you want to change the public URI settings? That can cause problems - there could be artifacts persisted that refer to the initial public URI settings. Switching to a non-SSL configuration is something you should really do as part of your initial configuration.
http://publib.boulder.ibm.com/infocenter/clmhelp/v3r0/topic/com.ibm.jazz.install.doc/topics/t_disable_server_certificates.html
I don't think you need to run the setup wizard again. Unless you want to change the public URI settings? That can cause problems - there could be artifacts persisted that refer to the initial public URI settings. Switching to a non-SSL configuration is something you should really do as part of your initial configuration.
Is it still correct what's written in:
https://jazz.net/wiki/bin/view/Main/TestingWithReverseProxyWithoutSSL ?
That is I just need to:
- In the web.xml file, change all occurrences of CONFIDENTIAL to NONE (only for the jts application?)
-If you use Apache Tomcat, navigate to the Jazz-Team-Server-installation-directory/ server/tomcat/conf directory.
* Open the server.xml file in an editor. Remove the redirectPort attribute from the 9080 Connector element. Save the file.
Then I need to run again the setup wizard?
The problem is really the public URI. I tried to change the jts and the ccm public URI via the admin function but I got a broken ccm... (a lot of components in error state, jts not giving me ccm as a registered application) so I asked here.
So yesterday I just reverted the web.xml, server.xml and team.properties for going back to the SSL configuration and everything worked again.
Today I tried again....
- changed web.xml
- changed server.xml
- run jts/setup
...
and everything works without SSL.
Maybe changing the public URI using the ccm admin function is not a good idea....
Hope it helps for somebody else.
So yesterday I just reverted the web.xml, server.xml and team.properties for going back to the SSL configuration and everything worked again.
Today I tried again....
- changed web.xml
- changed server.xml
- run jts/setup
...
and everything works without SSL.
Maybe changing the public URI using the ccm admin function is not a good idea....
Hope it helps for somebody else.
Not everything is as I expected...
I still see in the friend list for ccm
https://(mydomain):9443/jts/rootservices
and not http on 9080
and I still see from jts point of view (registered applications) that ccm URI
https://(mydomain):9443/ccm/scr
So I changed all https connection to http from jts admin and ccm admin and I
1) DELETED ccm from friend's list (saving all the parameters)
2) ADD again ccm as a new friend (and passed the new registration on http)
I still see in the friend list for ccm
https://(mydomain):9443/jts/rootservices
and not http on 9080
and I still see from jts point of view (registered applications) that ccm URI
https://(mydomain):9443/ccm/scr
So I changed all https connection to http from jts admin and ccm admin and I
1) DELETED ccm from friend's list (saving all the parameters)
2) ADD again ccm as a new friend (and passed the new registration on http)
Could you describe what all chamges you made to disable ssl.I'm running into similiar problems. My public URL is https, and after diabling ssl as mentioned in this post,the initial access to jts and ccm does take me to http:9080, but if i try to access the apps from within the jts I am redirected to https:9443.
Thanks
Thanks
Is there additional information regarding the no SSL configuration support for RTC 3.0?
I have followed the help instructions but still having significant issues Fundamentally I want to access the CCM url without have to accept a security certificate.
The instructions only are concerned with turning the JTS web app from CONFIDENTIAL to NONE. Are there additional instructions for doing the same to the ccm application?
I have updated the web.xml for the ccm, updated the public uris in the two admin consoles....
Now the majority of my components fail with a
CRJAZ1135I Failed to find the service
"com.ibm.team.repository.service.compatibility.internal.IJtsConfigurationStateService"
with a matching filter "(validJtsConfig=true)". Use the
administrative UI to verify that the server and applications are
configured correctly.
I have followed the help instructions but still having significant issues Fundamentally I want to access the CCM url without have to accept a security certificate.
The instructions only are concerned with turning the JTS web app from CONFIDENTIAL to NONE. Are there additional instructions for doing the same to the ccm application?
I have updated the web.xml for the ccm, updated the public uris in the two admin consoles....
Now the majority of my components fail with a
CRJAZ1135I Failed to find the service
"com.ibm.team.repository.service.compatibility.internal.IJtsConfigurationStateService"
with a matching filter "(validJtsConfig=true)". Use the
administrative UI to verify that the server and applications are
configured correctly.
Now the majority of my components fail with a
CRJAZ1135I Failed to find the service
"com.ibm.team.repository.service.compatibility.internal.IJtsConfigurationStateService"
with a matching filter "(validJtsConfig=true)". Use the
administrative UI to verify that the server and applications are
configured correctly.
Was the public URI setup to https://myHostname or http://myhostanme
I suggest we install and configure with http://
Now the majority of my components fail with a
CRJAZ1135I Failed to find the service
"com.ibm.team.repository.service.compatibility.internal.IJtsConfigurationStateService"
with a matching filter "(validJtsConfig=true)". Use the
administrative UI to verify that the server and applications are
configured correctly.
Was the public URI setup to https://myHostname or http://myhostanme
I suggest we install and configure with http://
The initial install was with https ....
Ive thought about the reinstall, with the public URI's set to http. I am confused now though based on the other instructions.
When during the install process do I change the server.xml and web.xml(s) files? Should I start the server once before I change them or not?
See the section "disabling SSL" here:
- If you use Apache Tomcat, make sure that you have started the Apache Tomcat server at least once.
- In the web.xml file, change all occurrences of CONFIDENTIAL to NONE. Save the file. (both for ccm and jts)
- If you use Apache Tomcat, navigate to the Jazz-Team-Server-installation-directory/server/tomcat/conf directory.
- Open the server.xml file in an editor. Remove the redirectPort attribute from the 9080 Connector element. Save the file.
- Restart the Apache Tomcat server.
- Verify that you can login via http://localhost:9080/jazz/admin without being redirected to https://localhost:9443/jazz/admin.
Comments
Stefano Antoniazzi
May 11 '16, 10:09 a.m.See the last answer in this post to get the correct answer.