Liferay中怎么配置SSL

Liferay中怎么配置SSL,很多新手对此不是很清楚,为了帮助大家解决这个难题,下面小编将为大家详细讲解,有这方面需求的人可以来学习下,希望你能有所收获。

liferay docker files

  • Dockerfile.

Docker liferay

  • docker run -it -p 80:8080 -p 443:8443 -v $(pwd)/xyz123:/mnt/liferay liferay/portal:7.3.4-ga5.

  • alpine can not run root,so ports bellow 1024 have no permission to run.

SSL

cp /opt/liferay/tomcat/conf/server.xml /mnt/liferay/files/tomcat/conf/server.xml cp /opt/liferay/tomcat/webapps/ROOT/WEB-INF/web.xml /mnt/liferay/files/tomcat/webapps/ROOT/WEB-INF/web.xml

files

files in the host directory $(pwd)/xyz123/files are also available in the container directory /mnt/liferay/files and will be copied to /opt/liferay before Liferay Portal starts.

Utils

  • netstat -an | grep 443

  • lsof -i:80

  • lsof -i -P | grep -i "listen"

Remark

<Connector port="8443"
    protocol="org.apache.coyote.http11.Http11NioProtocol"
    SSLEnabled="true"
    scheme="https"
    secure="true"
    keystoreFile="/opt/liferay/tomcat/cert/3463152_jx.51redwing.net.pfx"
    keystoreType="PKCS12"
    keystorePass="证书密码"
    clientAuth="false"
    SSLProtocol="TLSv1+TLSv1.1+TLSv1.2"
  ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA256"/>

<security-role>
    <role-name>users</role-name>
</security-role>

<security-constraint>
    <web-resource-collection>
        <web-resource-name>securedapp</web-resource-name>
        <url-pattern>/*</url-pattern>
    </web-resource-collection>
    <user-data-constraint>
        <transport-guarantee>CONFIDENTIAL</transport-guarantee>
    </user-data-constraint>
</security-constraint>

看完上述内容是否对您有帮助呢?如果还想对相关知识有进一步的了解或阅读更多相关文章,请关注行业资讯频道,感谢您对亿速云的支持。