Setting Up HTTPS

SSL settings differ by certificate, so we recommend following the guide from your SSL certificate provider.

ManualWorks uses Apache Tomcat 9.0, so for SSL settings in general, see this guide.

The following explains how to apply a certificate with the jks extension.

Open the 3RABBITZ_HOME/tomcat/conf/server.xml file.

Add the following tag after the Connector tag.

<Connector protocol="HTTP/1.1" port="8443" connectionTimeout="20000"
    URIEncoding="UTF-8"
    maxPostSize="-1" Server="3Rabbitz" relaxedQueryChars="^`\|{}[]" 
    SSLEnabled="true"
    scheme="https"
    secure="true"
    clientAuth="false"
    sslProtocol="TLS"
    keystoreFile="/path/to/your/keystore.jks"
    keystorePass="your_keystore_password"
/>

Enter the certificate file location in the keystoreFile attribute and the certificate password in the keystorePass attribute.

On Linux, the account that runs ManualWorks must be able to read the certificate file.

Restart ManualWorks

Restart ManualWorks.

Note the following.

Port 8443 is used by default. You can forward requests on port 443 to port 8443 with iptables.
To redirect HTTP requests to HTTPS, see this guide.

If the base URL starts with https://, ManualWorks sends the Strict-Transport-Security: max-age=31536000; includeSubDomains; preload header with every response. Web browsers that receive this header connect to the domain and its subdomains only over HTTPS for one year. If any subdomain serves a system only over HTTP, check it before you change the base URL to https://.