NEC ExpEther-2S, User Manual

Page: 53 / 112

33
3.
Enabling HTTPS
This step is not required if you do not use HTTPS.
HTTPS is disabled in the initial status.
This step allows you to enable HTTPS.
First, execute the following command to create a key store.
# keytool -genkeypair -dname "cn=<Host name or IP address>" -alias tomcat -keyalg RSA -
keystore <EEM path>/tomcat/.keystore
* Enter any password when you are required.
Next, fix the following file.
<EEM path>/tomcat/conf/server.xml
Before change
：
<!—
<Connector port="30501" protocol="org.apache.coyote.http11.Http11Protocol"
maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" />
-->
After change
：
<Connector port="30501" protocol="org.apache.coyote.http11.Http11Protocol"
maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="<EEM path>/tomcat/.keystore" keystorePass="tomcat" />
* Change the port number of HTTPS as required.
Comment out the <Connector> tag shown in “Changing HTTP ports” by enclosing with “<!--”
and “-->” to enable HTTPS and disable HTTP at the same time.
Example of setting
：
<!--
<Connector port="30500" protocol="HTTP/1.1"
maxThreads="10" connectionTimeout="5000"
redirectPort="30501" />
-->
4.
Setting a firewall
Set a firewall to get through HTTP and HTTPS ports as required.
5.
Setting Basic authentication
This step is not required if Basic authentyication is disabled.
Basic authentication of REST API service is disabled in the default seting.
This step allows you to enable Basic authentication.
Modify the following file to enable Basic authentication.
<EEM path>/tomcat/webapp/eem/WEB-INF/web.xml