This entry guides you through the steps to configure Ambience/Repertoire 202x to run in HTTPS mode.
- Create a new folder. Open a command window over at the folder path and follow through the following steps below to generate a self-signed keystores.
How to Generate Keystore?:
This command generates a Keystore called elxkeys.jks:
keytool -genkeypair -alias elxkeys -keyalg RSA -validity 3650 -keysize 2048 -keystore elxkeys.jks
Next, use this command to extract the certificate, here called elxkeys.cert:
keytool -export -alias elxkeys -keystore elxkeys.jks -rfc -file elxkeys.cert
Add the newly created certificate to “cacerts”
keytool -import -trustcacerts -alias elxkeys -file elxkeys.cert -cacerts
-
Once done, park the created keystore (i.e. elxkeys.jks) over in the following directory
\etc\https
Note: The https folder needs to be created manually -
Open up the etc\application.conf file and revise the necessary parts as bolded below:
# How browsers communicate with Ambience - this may be a load balancer
external-protocol = “https:”
external-host = “localhost”
external-port = 1740# How Ambience instances communicate internally - which may be a different (firewalled) IP range than the public (load balanced) name
internal-protocol = “https:”
internal-host = "localhost”
internal-port = 1740
…
ambience {
bindAddress: “0.0.0.0”
bindPort: ${internal-port}
https {
enabled = true
keystore = “https/<your keystore name> (i.e. elxkeys.jks)”
keystore-type = “<your keystore type> (i.e. JKS)”
keystore-password = “<your keystore password>”
}
}
-
Save the etc/application.conf file and restart the Ambience server.
-
Once restarted, in the ambience logs, you should be able to see that the Ambience server is running in HTTPS mode over at port 1740. (**Depending on port number configured.)
2022-02-21 14:27:50.584 INFO ambience.module.Launcher - Running with WebRoot: C:\Ambience-2021.2\web
2022-02-21 14:27:50.585 INFO ambience.module.Launcher - Server listening on 0.0.0.0, 1740
2022-02-21 14:27:50.942 INFO ambience.module.HttpsSetup - Running in HTTPS mode