Skip to content

Commit

Permalink
removing tomcat ssl connector on proxycas instance (#115)
Browse files Browse the repository at this point in the history
Note: there are still some occurences for "8443" in the repository, but
related to the redirectPort, and even if I am not sure if this is still
needed, I think it comes from the default tomcat configuration. I am
pretty sure we can leave them as they are, as it won't harm. In the
other tomcat configurations, they appear in a commented block.

Also I kept all the logic of trusting the generated self signed
certificate, because I think it should be still in use by the JVM /
server-to-server communication.
  • Loading branch information
pmauduit committed Apr 11, 2023
1 parent 110874b commit 9c5c513
Show file tree
Hide file tree
Showing 2 changed files with 0 additions and 17 deletions.
13 changes: 0 additions & 13 deletions roles/tomcat/templates/server-proxycas.xml.j2
Original file line number Diff line number Diff line change
Expand Up @@ -71,19 +71,6 @@
URIEncoding="UTF-8"
redirectPort="8443" />

<Connector port="8443" protocol="HTTP/1.1"
SSLEnabled="true"
scheme="https"
secure="true"
URIEncoding="UTF-8"
maxThreads="150"
clientAuth="false"
keystoreFile="/usr/lib/jvm/adoptopenjdk-11-hotspot-amd64/lib/security/cacerts"
keystorePass="changeit"
compression="on"
compressionMinSize="2048"
noCompressionUserAgents="gozilla, traviata"
compressableMimeType="text/html,text/xml,application/xml,text/javascript,application/x-javascript,application/javascript,text/css" />
<!-- A "Connector" using the shared thread pool-->
<!--
<Connector executor="tomcatThreadPool"
Expand Down
4 changes: 0 additions & 4 deletions spec/georchestra/georchestra_spec.rb
Original file line number Diff line number Diff line change
Expand Up @@ -48,10 +48,6 @@
it { should be_listening }
end

describe port(8443) do
it { should be_listening }
end

# datafeeder
describe port(8480) do
it { should be_listening }
Expand Down

0 comments on commit 9c5c513

Please sign in to comment.