Liferay : Adding https feature (Secured Socket Layer - SSL) - Default port 443

·         (1) Configuration of https (Secured Socket Layer-SSL) feature : -

·         Stop the Tomcat

·         To prepare the keystore certificate, please follow the below steps: -

·         Type the following command and enter the values specified as below

C:\keytool –genkey –alias tomcat –validity 1000 –keyalg RSA  <press ENTER>

(Note: - “your firstname and lastname” MUST be hostname of your server and cannot be a IP address; this is very important as an IP address will fail client hostname verification even if it is correct.)

·         Enter keystore password:   changeit

·         What is your first and last name?

[Unknown]:   www.company_name.com

·         What is the name of your organizational unit?

[Unknown]:   Infra

·         What is the name of your organization?

[Unknown]:   Company Name

·         What is the name of your City or Locality?

[Unknown]:   Bengaluru

·         What is the name of your State or Province?

[Unknown]:   Karnataka

·         What is the two-letter country code for this unit?

[Unknown]:   IN

·         Is CN=www.company_name.com, OU=Infrastructure, O=Company Name, L=Bangalore, ST=Karnataka, C=IN correct? [no]:  y

·         Enter key password for <tomcat>

·         (RETURN if same as keystore password): <press ENTER>

·         Search for .keystore file and copy it to C:\Documents and Settings\Default User folder.  Otherwise, you will get an error message on Tomcat restart.  Tomcat searches for .keystore file at this path.

·         Uncomment the connector element for port No. 8443 and comment the connector element for port No. 8080 in the file

·         C:\training\liferay\tomcat\conf\server.xml

·         Look for the tag <Security-Constraint> and its sub-tag <user-data-constraint> in the file C:\training\liferay\tomcat\webapps\ROOT\WEB-INF\web.xml and configure their sub-tag value as

<transport-guarantee>CONFIDENTIAL</transport-guarantee>

·         Start the Tomcat

·         Check for the Tomcat’s log files in C:\training\liferay\tomcat\logs

·         Test the application using the URL: - https://localhost:8443

·         Login the application with Administrator’s User-Id and Password.  In Admin portlet, click on Enterprise menu and update the port number for the Portal URL and Home URL.   

·         Click the Save button.

·      (2) To convert the https port number of application from 8443 to default 443:

·         If Microsoft’s IIS was installed in the same system, create one more IP address for that system and configure the IIS with the new IP address.

·         Replace the port number 443 in place of 8443 in the file:

·         C:\training\liferay\tomcat\conf\server.xml

·         Test the application using the URL: - https://localhost

·         Login the application with Administrator’s User-Id and Password.  In Admin portlet, click on Enterprise menu and remove the port number for the Portal URL and Home URL.

• Click the Save button.

Java Plug-in: Single Sign-On for Intranet Applications: JCIFS (Java CIFS client Library)

Java Plug-in to make Single Sign-On for Intranet Applications

JCIFS is an open source client library that implements the CIFS/SMB networking protocol in 100% Java.  CIFS is the standard file sharing protocol on the Microsoft Windows platform (Ex: Map Network Drive ...).  This client is used extensively in production on large Intranets.  The JCIFS SMB client library enables Java applications to remotely access shared files and directories on SMB file servers (i.e. a Microsoft Windows "share") in addition to domain, workgroup, and server enumeration of NetBIOS over TCP/IP networks.  It is an advanced implementation of the CIFS protocol supporting Unicode, batching, multiplexing of threaded callers, encrypted authentication, transactions, the Remote Access Protocol (RAP), and much more.