How to Disable SSL Communications between the VERDE-Client and the Guest Image

            Product Line:  VERDE

            For some users/customers, security isn't a concern especially between the client and the guest image.  To disable SSL between the two, perform the following:


            Steps are here:

            1) /usr/lib/verde/etc/server_xml.template

            you should remove the redirection port for HTTP connector. So you should obtain the next piece for HTTP connector:
            <Connector port="8080" 
            protocol="HTTP/1.1" 
            maxThreads="300"
            connectionTimeout="20000" 
            URIEncoding="UTF-8"
            />

            2) /usr/lib/verde/etc/apache-tomcat/webapps/mc/WEB-INF/web.xml
            /usr/lib/verde/etc/apache-tomcat/webapps/VIA/WEB-INF/web.xml
            /usr/lib/verde/etc/apache-tomcat/webapps/uc5/WEB-INF/web.xml

            In these files you should completely remove (in the end of file) the next section:
            <!-- Require HTTPS for everything -->
            <security-constraint>
            <web-resource-collection>
            <web-resource-name>HTTPSOnly</web-resource-name>
            <url-pattern>/*</url-pattern>
            </web-resource-collection>
            <user-data-constraint>
            <transport-guarantee>CONFIDENTIAL</transport-guarantee>
            </user-data-constraint>
            </security-constraint>
            <security-constraint>
            <web-resource-collection>
            <web-resource-name>HTTPSOrHTTP</web-resource-name>
            </web-resource-collection>
            <user-data-constraint>
            <transport-guarantee>NONE</transport-guarantee>
            </user-data-constraint>
            </security-constraint>
            <security-constraint>
            <web-resource-collection>
            <web-resource-name><strong>restricted methods</strong></web-resource-name>
            <url-pattern>/*</url-pattern>
            <http-method>OPTIONS</http-method>
            </web-resource-collection>
            <auth-constraint />
            </security-constraint>

            3) restart VERDE service

            That's all. After performing of these steps i was able to use http://%3Cip_adress%3E/mc and http://%3Cip_adress%3E/uc5
            Also VERDE client was able to connect by using of http://%3Cip_adress/> instead <IP_ADRESS>


            Updated: 02 Aug 2018 11:31 AM
            Helpful?  
            Help us to make this article better
            0 0