Uploaded image for project: 'Help-Desk'
  1. Help-Desk
  2. HELP-13030

[Fiware-tech-help] IMPACT: Making Knowage secure SSL

        Details

        • Type: extRequest
        • Status: Closed
        • Priority: Major
        • Resolution: Done
        • Fix Version/s: 2021
        • Component/s: FIWARE-TECH-HELP
        • Labels:
          None

          Description

          Hi

          How can I make the Knowage dashboard secure?
          I'd like to host it as an iframe on a secure domain.

          Thanks

          Michael Hermon
          Chief of Product
          (347) 620-0048
          Skype - michaelhermon101
          http://farmdog.ag

          __________________________________________________________________________________________

          You can get more information about our cookies and privacy policies on the following links:

          Fiware-tech-help mailing list
          Fiware-tech-help@lists.fiware.org
          https://lists.fiware.org/listinfo/fiware-tech-help

            Activity

            Hide
            Permalink
            zerbetto Davide Zerbetto added a comment -

            The issue has been emailed:

            • Time sent: 11/Dec/17 11:47 AM
            • To: michael@farmdog.ag
            • with subject: RE: [Fiware-tech-help] IMPACT: Making Knowage secure SSL

            Dear Michael
            you should install a valid SSL certificate on Tomcat, that is the servlet container where Knowage is deployed.
            You have to retrieve a SSL certificate from a CA, or to create a self-signed one, and then install it on Tomcat.
            You can find some documentation for self-signed certificates here (documentation is for SpagoBI, but it is the same also for Knowage):
            https://wiki.spagobi.org/xwiki/bin/view/spagobi_server/sso#HConfigureHTTPS
            After SSL installation, remember to change the environment variables "host_url" and "service_url" from HTTP to HTTPS.
            You can also leave "service_url" to be http://localhost:8080/knowage but this mean you have to leave the http Tomcat connector open on port 8080, in that case I suggest to limit this connector only for localhost:

            https://serverfault.com/questions/218666/how-to-configure-tomcat-to-only-listen-to-127-0-0-1

            Hope this helps
            Best regards
            Davide

            Show
            zerbetto Davide Zerbetto added a comment - The issue has been emailed: Time sent: 11/Dec/17 11:47 AM To: michael@farmdog.ag with subject: RE: [Fiware-tech-help] IMPACT: Making Knowage secure SSL Dear Michael you should install a valid SSL certificate on Tomcat, that is the servlet container where Knowage is deployed. You have to retrieve a SSL certificate from a CA, or to create a self-signed one, and then install it on Tomcat. You can find some documentation for self-signed certificates here (documentation is for SpagoBI, but it is the same also for Knowage): https://wiki.spagobi.org/xwiki/bin/view/spagobi_server/sso#HConfigureHTTPS After SSL installation, remember to change the environment variables "host_url" and "service_url" from HTTP to HTTPS. You can also leave "service_url" to be http://localhost:8080/knowage but this mean you have to leave the http Tomcat connector open on port 8080, in that case I suggest to limit this connector only for localhost: https://serverfault.com/questions/218666/how-to-configure-tomcat-to-only-listen-to-127-0-0-1 Hope this helps Best regards Davide

              People

              • Assignee:
                zerbetto Davide Zerbetto
                Reporter:
                fw.ext.user FW External User
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: