Author Message
AmitKumar12
Joined: Apr 16, 2019
Messages: 6
Offline
We have configured tomcat to serve requests over https (port 8443). While calling the application we are getting error.badfetch.http.404, as application is not able to respond within specified fetch time out. Below are our configuration from server.xml

<Connector
protocol="org.apache.coyote.http11.Http11NioProtocol"
port="8443"
maxThreads="200"
scheme="https"
secure="true"
SSLEnabled="true"
keystoreType="JKS"
keystoreFile="<TOMCAT_HOME>\lib\localhost-rsa.jks"
keystorePass="changeit"
keyAlias="tomcat-localhost"
clientAuth="false" sslProtocol="TLSv1.2">
<UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
</Connector>

While hitting the URL from browser(IE) on same server, we are getting response between 50-55 seconds.

Request you to please share your suggestions on how we can reduce response time.

Any reference link / document to configure tomcat over https.

Tomcat Version:- Apache Tomcat 8.5.9 Server
AAOD:- 7.2.1

Thanks in Advance.
WilsonYu
Joined: Nov 6, 2013
Messages: 3950
Offline
Error 404 is page not found. Are you sure you type in the correct url or the app has been deployed probably? We don't have specific documentation for app servers. Customers are responsible for having the app server configured probably. OD apps are just regular web apps in terms of deployment.
AmitKumar12
Joined: Apr 16, 2019
Messages: 6
Offline
Hi WilsonYu,

Thanks for your response.

URL is correct only as same is working over IE (with delayed response), App is working properly over http.

We have to use https as we are getting "Clear text communication" vulnerability after internal security tests and recommendation is to use SSL certificate.

Any suggestion / work around from your side with for this vulnerability with respect to MPP/AppServer communication.

How we can confirm that communication between MPP and App Server is secure?

If this is something which devconnect do not support, we can close this thread.

Thanks.
WilsonYu
Joined: Nov 6, 2013
Messages: 3950
Offline
If you are concerned about the communication security between EP and the app server, you should use SSL/TLS. Tomcat should be pretty easy to configure with that. That's the only thing you have to do.
Go to:   
Mobile view