Configuration of access to consoles by https

Ruben_Montealegre

Hi mates, 

I got a request  of my customer to configure the access at console of WEM (AppConsole, configconsole, content...) over https.

I'm using WEM 8.1 and Weblogic 10.3.3.

somebody know how i can configure this access correctly or if there are some information somewhere about this?

Any information will be welcome.
Thanks in advance.

Qutubuddin

Here is one easy way to do this.

 

-Front WEM with a WebServer like Apache.

-Setup HTTPS till the Web Server.

-Proxy request from Web Server to WEM port 27110 over http.

-Make sure Port 27110 is only accessible from Web Server machine by adding required firewall rules in network firewall. If network firewall is not available you can do this by setting up firewall rules locally on the WEM machine.

 

Setting up the TLS/SSL directly in Weblogic is little more complicated but can be done as well. Look at Weblogic App server Admin documentation for more details on that.

 

Best Regards

 

Qutub

 

From: eLink Entry: Discussion Group - Web Experience Management <v7webcontentmanagement@elinkkc.opentext.com>
Sent: Tuesday, April 23, 2019 12:13 PM
To: eLink Recipient <devnull@elinkkc.opentext.com>
Subject: Configuration of access to consoles by https

 

Configuration of access to consoles by https

Posted byruben.montealegre@vilt-group.com (Montealegre, Ruben) On 04/23/2019 10:52 AM

 

Hi mates,  I got a request  of my customer to configure the access at console of WEM (AppConsole, configconsole, content...) over https. I'm using WEM 8.1 and Weblogic 10.3.3. somebody know how i can configure this access correctly or if there are some information somewhere about this? Any information will be welcome. Thanks in advance.

---

[To post a comment, use the normal reply function]
Forum:	Discussion Group - Web Experience Management
Content Server:	My Support

 

Ruben_Montealegre

Hi Qutubuddin Saifuddin, 

 

 

I chose to do it through Weblogic configuration. I have generated a self-signed certificate with Keytool, generated a keystore and configured SSL and port. This configuration works if I access AppConsole, configconsole, content through Internet Explorer, but with chrome I get this error (ERR_SSL_PROTOCOL_ERROR) and in firefox (SSL_ERROR_NO_CYPHER_OVERLAP). My version of Java on the machine is 1.6.0_22 in case it would help. Any explanation of these errors? Do I need to configure something else? What could I do to make it work properly? Thanks in advance, any help is welcome.

Rubén

 

Qutubuddin

 

It seems like with your version of JDK, the cypher suite you are using is no longer  supported by newer browsers. Typically due to security reason. IE is the most permissible browser as it tries to be compatible with very old applications. You may want to look at your embedded JCA/JCE implementation. There may a newer release that your version of JDK may be able to use which may provide support for newer cryptographic algorithms by default.

 

Best Regards

 

Qutub

 

From: eLink Entry: Discussion Group - Web Experience Management <v7webcontentmanagement@elinkkc.opentext.com>
Sent: Wednesday, May 29, 2019 8:16 AM
To: eLink Recipient <devnull@elinkkc.opentext.com>
Subject: RE Configuration of access to consoles by https

 

RE Configuration of access to consoles by https

Posted byruben.montealegre@vilt-group.com (Montealegre, Ruben) On 05/29/2019 08:12 AM

 

Hi Qutubuddin Saifuddin,      I chose to do it through Weblogic configuration. I have generated a self-signed certificate with Keytool, generated a keystore and configured SSL and port. This configuration works if I access AppConsole, configconsole, content through Internet Explorer, but with chrome I get this error (ERR_SSL_PROTOCOL_ERROR) and in firefox (SSL_ERROR_NO_CYPHER_OVERLAP). My version of Java on the machine is 1.6.0_22 in case it would help. Any explanation of these errors? Do I need to configure something else? What could I do to make it work properly? Thanks in advance, any help is welcome. Rubén

---

[To post a comment, use the normal reply function]
Topic:	Configuration of access to consoles by https
Forum:	Discussion Group - Web Experience Management
Content Server:	My Support

 

Ruben_Montealegre

Hi again, 

 

At this point, seeing that the JDK versions are lower, it is another problem to deal with the client, since increasing the JAVA version may affect the compatibility matrix of the WEM product and it is they (the client) who must decide what to do in this case.

So I'm going to consider this thread closed, although I could not solve it because of the JDK version problem.

Thank you very much for your time and your answers and greetings. Rubén

Thanks a lot for your response...