Home / server / Questions / 240208
Accepted
xain
Asked: 2011-02-26 04:21:44 +0800 CST

How to secure tomcat's manager with ssl

  • 772

How can I secure tomcat's application manager with ssl ? I already have the certificates for the site.

Thanks

tomcat ssl

3 Answers

  1. You could try adding user-data-constraints in tomcat manager's web.xml. That might do the trick:

    <user-data-constraint>
  <transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>

    Maybe insert them before the /security-contraint closing tag in the HTML Manager commands section of that web.xml:

    • 2

  2. you can use nginx or apache in front of your tomcat to control access easily.

    • 1
  3. Best Answer

    Define the admin app inside a SSL connector.

    http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html

    • 1