Skip to end of metadata
Go to start of metadata

There is an easy way to configure SSL for Frevvo Forms without having to worry about keystores and command line tools.

This process involves importing a cert into IIS and exporting it as a PFX file, allowing it to be natively imported into Tomcat without having to do any SSL registration on Tomcat's side. This method is quicker, and easier to perform than previous methods used to add SSL to Tomcat.

Setup

Preparation:

Adding and Removing Bindings from IIS

  1. Right-click on your default web site
  2. Select ‘Edit bindings’
  3. Click ‘Add’
  4. Select Type: Https, SSL Certificate:, and the click OK

1) Export the Certificate

Open IIS Management Console

Start –> Administrative Tools –> Internet Information Services (IIS) Manager

Click on the server name, and then double click server certificates under the IIS section

Right-click on the certificate you want to use and choose Export, then select the folder you want the exported .pfx file to save to

Type in the password for the file and remember it!

Click “OK”

Close out of the wizard.

2) Import into Tomcat

Copy the certificate to a directory of your choice on the server running Tomcat (for example, C:\GlobalForms6\tomcat\conf)

Open up your server.xml file in your text editor, normally located at %TOMCAT_HOME/conf/server.xml

Uncomment out the SSL connector portion if you have not already done so.

Add the following lines near the bottom of the SSL Connector portion

keystoreFile=”/usr/local/wherever/domaincert.pfx” keystorePass=”PasswordICreatedAbove”
keystoreType=”PKCS12″

Save server.xml

Restart the tomcat service

3) Verify Functionality

Point your web browser to https://hostname.domain.com:8443 and verify it works. The port specified in the SSL section of the Frevvo.XML is required in the URL.