Uploaded image for project: 'Help-Desk'
  1. Help-Desk
  2. HELP-13030

[Fiware-tech-help] IMPACT: Making Knowage secure SSL

        Details

        • Type: extRequest
        • Status: Closed
        • Priority: Major
        • Resolution: Done
        • Fix Version/s: 2021
        • Component/s: FIWARE-TECH-HELP
        • Labels:
          None

          Description

          Hi

          How can I make the Knowage dashboard secure?
          I'd like to host it as an iframe on a secure domain.

          Thanks

          Michael Hermon
          Chief of Product
          (347) 620-0048
          Skype - michaelhermon101
          http://farmdog.ag

          __________________________________________________________________________________________

          You can get more information about our cookies and privacy policies on the following links:

          Fiware-tech-help mailing list
          Fiware-tech-help@lists.fiware.org
          https://lists.fiware.org/listinfo/fiware-tech-help

            Activity

            Descending order - Click to sort in ascending order
            Transition Time In Source Status Execution Times Last Executer Last Execution Date
            Open Open In Progress In Progress
            		1d 1 Davide Zerbetto 11/Dec/17 11:47 AM
            In Progress In Progress Answered Answered
            		3s 1 Davide Zerbetto 11/Dec/17 11:47 AM
            Answered Answered Closed Closed
            		7m 52s 1 Davide Zerbetto 11/Dec/17 11:55 AM
            fla Fernando Lopez made changes -
            Fix Version/s 2021 [ 12600 ]
            fla Fernando Lopez made changes -
            Description Hi

            How can I make the Knowage dashboard secure?
            I'd like to host it as an iframe on a secure domain.

            Thanks

            *Michael Hermon*
            Chief of Product
            (347) 620-0048
            Skype - michaelhermon101
            http://farmdog.ag

            __________________________________________________________________________________________

            You can get more information about our cookies and privacy policies on the following links:
            - http://forge.fiware.org/plugins/mediawiki/wiki/fiware/index.php/FIWARE_Privacy_Policy
            - http://forge.fiware.org/plugins/mediawiki/wiki/fiware/index.php/Cookies_Policy_FIWARE

            Fiware-tech-help mailing list
            Fiware-tech-help@lists.fiware.org
            https://lists.fiware.org/listinfo/fiware-tech-help


            [Created via e-mail received from: Michael Hermon <michael@farmdog.ag>]             		Hi

            How can I make the Knowage dashboard secure?
            I'd like to host it as an iframe on a secure domain.

            Thanks

            *Michael Hermon*
            Chief of Product
            (347) 620-0048
            Skype - michaelhermon101
            http://farmdog.ag

            __________________________________________________________________________________________

            You can get more information about our cookies and privacy policies on the following links:
            - http://forge.fiware.org/plugins/mediawiki/wiki/fiware/index.php/FIWARE_Privacy_Policy
            - http://forge.fiware.org/plugins/mediawiki/wiki/fiware/index.php/Cookies_Policy_FIWARE

            Fiware-tech-help mailing list
            Fiware-tech-help@lists.fiware.org
            https://lists.fiware.org/listinfo/fiware-tech-help
            fla Fernando Lopez made changes -
            Comment [ Comment by jira-help-desk@jira.fiware.org :

            Spam detection software, running on the system "fiware-forge-01", has
            identified this incoming email as possible spam. The original message
            has been attached to this so you can view it (if it isn't spam) or label
            similar future email. If you have any questions, see
            the administrator of that system for details.

            Content preview: [ https://jira.fiware.org/browse/HELP-13030?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
               ] FW External User updated HELP-13030: > [Fiware-general-help] [SPAM] [FIWARE-JIRA]
               (HELP-13082) [SPAM] Website Job Application > > > Key: HELP-13030 > URL:
              https://jira.fiware.org/browse/HELP-13030 > Project: Help-Desk > Issue Type:
               extRequest > Reporter: FW External User > Attachments: [FIWARE-JIRA] (HELP-13082)
               [Fiware-general-help] [SPAM] Website Job Application > > > Spam detection
               software, running on the system "fiware-forge-01", has > identified this
              incoming email as possible spam. The original message > has been attached
              to this so you can view it (if it isn't spam) or label > similar future email.
               If you have any questions, see > the administrator of that system for details.
               > Content preview: [ https://jira.fiware.org/browse/HELP-13082?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
               > ] FW External User updated HELP-13082: > [Fiware-general-help] [SPAM] Website
               > Job Application > > > Key: HELP-13082 > URL: https://jira.fiware.org/browse/HELP-13082
               > > Project: Help-Desk > Issue Type: extRequest > Components: SPAM > Reporter:
               > FW External User > Attachments: [FIWARE-JIRA] (HELP-12876) [Fiware-general-help]
               > [SPAM] [FIWARE-JIRA] (HELP-13082) [SPAM] Website Job Application, [FIWARE-JIRA]
               > (HELP-12876) [Fiware-general-help] [SPAM] [FIWARE-JIRA] (HELP-13082) [SPAM]
               > Website Job Application, [FIWARE-JIRA] (HELP-12876) [Fiware-general-help]
               > [SPAM] [FIWARE-JIRA] (HELP-13082) [SPAM] Website Job Application, [FIWARE-JIRA]
               > (HELP-12877) [Fiware-general-help] [SPAM] [FIWARE-JIRA] (HELP-13082) [SPAM]
               > Website Job Application, [FIWARE-JIRA] (HELP-12877) [Fiware-general-help]
               > [SPAM] [FIWARE-JIRA] (HELP-13082) [SPAM] Website Job Application, [FIWARE-JIRA]
               > (HELP-12877) [Fiware-general-help] [SPAM] [FIWARE-JIRA] (HELP-13082) [SPAM]
               > Website Job Application, [FIWARE-JIRA] (HELP-12878) [Fiware-general-help]
               > [SPAM] [FIWARE-JIRA] (HELP-13082) [SPAM] Website Job Application, [FIWARE-JIRA]
               > (HELP-12878) [Fiware-general-help] [SPAM] [...]

            Content analysis details: (6.9 points, 4.5 required)

             pts rule name description
            ---- ---------------------- --------------------------------------------------
             0.0 FSL_HELO_NON_FQDN_1 FSL_HELO_NON_FQDN_1
             3.8 HELO_LOCALHOST HELO_LOCALHOST
             1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
                                        [URIs: latedeliver.com]
             2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
                                        [URIs: latedeliver.com]
            -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
                                        [score: 0.0000]
             0.8 RDNS_NONE Delivered to internal network by a host with no rDNS

            ]
            fla Fernando Lopez made changes -
            Attachment [FIWARE-JIRA] (HELP-13030) [Fiware-general-help] [SPAM] [FIWARE-JIRA] (HELP-13082) [SPAM] Website Job Application [ 61396 ]
            fw.ext.user FW External User made changes -
            Attachment [FIWARE-JIRA] (HELP-13030) [Fiware-general-help] [SPAM] [FIWARE-JIRA] (HELP-13082) [SPAM] Website Job Application [ 61396 ]
            zerbetto Davide Zerbetto made changes -
            Resolution Done [ 10000 ]
            Status Answered [ 10104 ] Closed [ 6 ]
            zerbetto Davide Zerbetto made changes -
            HD-Chapter Apps [ 10836 ]
            HD-Enabler Knowage [ 11200 ]
            zerbetto Davide Zerbetto made changes -
            Status In Progress [ 3 ] Answered [ 10104 ]
            zerbetto Davide Zerbetto made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            Hide
            Permalink
            zerbetto Davide Zerbetto added a comment -

            The issue has been emailed:

            • Time sent: 11/Dec/17 11:47 AM
            • To: michael@farmdog.ag
            • with subject: RE: [Fiware-tech-help] IMPACT: Making Knowage secure SSL

            Dear Michael
            you should install a valid SSL certificate on Tomcat, that is the servlet container where Knowage is deployed.
            You have to retrieve a SSL certificate from a CA, or to create a self-signed one, and then install it on Tomcat.
            You can find some documentation for self-signed certificates here (documentation is for SpagoBI, but it is the same also for Knowage):
            https://wiki.spagobi.org/xwiki/bin/view/spagobi_server/sso#HConfigureHTTPS
            After SSL installation, remember to change the environment variables "host_url" and "service_url" from HTTP to HTTPS.
            You can also leave "service_url" to be http://localhost:8080/knowage but this mean you have to leave the http Tomcat connector open on port 8080, in that case I suggest to limit this connector only for localhost:

            https://serverfault.com/questions/218666/how-to-configure-tomcat-to-only-listen-to-127-0-0-1

            Hope this helps
            Best regards
            Davide

            Show
            zerbetto Davide Zerbetto added a comment - The issue has been emailed: Time sent: 11/Dec/17 11:47 AM To: michael@farmdog.ag with subject: RE: [Fiware-tech-help] IMPACT: Making Knowage secure SSL Dear Michael you should install a valid SSL certificate on Tomcat, that is the servlet container where Knowage is deployed. You have to retrieve a SSL certificate from a CA, or to create a self-signed one, and then install it on Tomcat. You can find some documentation for self-signed certificates here (documentation is for SpagoBI, but it is the same also for Knowage): https://wiki.spagobi.org/xwiki/bin/view/spagobi_server/sso#HConfigureHTTPS After SSL installation, remember to change the environment variables "host_url" and "service_url" from HTTP to HTTPS. You can also leave "service_url" to be http://localhost:8080/knowage but this mean you have to leave the http Tomcat connector open on port 8080, in that case I suggest to limit this connector only for localhost: https://serverfault.com/questions/218666/how-to-configure-tomcat-to-only-listen-to-127-0-0-1 Hope this helps Best regards Davide
            veronika Veronika Vlnkova made changes -
            Assignee Davide Zerbetto [ davide.zerbetto ]
            backlogmanager Backlog Manager made changes -
            Field Original Value New Value
            Component/s FIWARE-TECH-HELP [ 10278 ]
            fw.ext.user FW External User created issue -

              People

              • Assignee:
                zerbetto Davide Zerbetto
                Reporter:
                fw.ext.user FW External User
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: