View source for Enabling SSL in the CTP Server

This article describes how to install a certificate and enable SSL in the CTP web server. The intended audience for this article is CTP administrators. This article requires an understanding of the Launcher Configuration Editor (See [[The CTP Launcher Configuration Editor]] for details).

==The CTP Keystore==
The certificate supplied by CTP to a client during the establishment of an SSL connection is contained in a keystore. CTP has a default keystore called <b><tt>keystore</tt></b> in the CTP directory. The password to the default keystore is <b><tt>ctpstore</tt></b>. The default keystore contains a self-signed certificate stored under the alias <b><tt>ctp</tt></b>.  

Since the certificate in the default keystore is self-signed, browsers will warn users when establishing SSL connections. For that reason, if SSL is to be used for connections to the server, it is best to provide a certificate signed by a real Certificate Authority like Verisign. Because the default keystore is overwritten on every CTP upgrade, it is best to put that certificate in a separate keystore and configure CTP to use that keystore instead of the default.

==Installing a Certificate==
The CTP server expects its certificate to be stored under the alias <b><tt>ctp</tt></b>. When installing a new certificate for the server, whether in a new keystore or in the default keystore, you must store it under that alias.

There is a program called KeystoreManager in the CTP directory. This is useful for examining a keystrore, but it should not be used for inserting certificates. You should use the Java keytool program which is located in the <b><tt>Java/jre7/bin</tt></b> directory. This program is well documented on the web.

==Specifying a Different Keystore==
To configure CTP to use a different keystore:

# Stop CTP.
# In the Launcher program, click the Configuration tab.
# Select the Server element in the left pane.
# In the Children menu, select SSL.
# In the right pane, enter the keystore filename and password in the fields.
# Ignore the truststore fields.
# Click Ctrl-S to save the configuration.
# Start CTP.

==Enabling SSL in the Server==
To switch the server to SSL:

# Stop CTP.
# In the Launcher program, click the Configuration tab.
# Select the Server element in the left pane.
# Change the port field to 443 (or whatever port you wish to use for SSL).
# Select the <b>yes</b> radio button in the ssl field in the right pane.
# Type Ctrl-S to save the configuration.
# Start CTP.

==Installing a Redirector==
Traditionally, SSL servers listen on port 443, but the default port used by browsers for HTTP connections is port 80. As a convenience to users, you can put a Redirector plugin in the configuration to redirect HTTP connections on port 80 over to HTTPS connections on port 443. To do that:
 
# Stop CTP.
# In the Launcher program, click the Configuration tab.
# Select the Server element in the left pane.
# Change the port field in the right pane to 443.
# In the Plugin menu, select Redirector.
# In the right pane, either change the httpsHost field to point to your server or make it blank.
# Type Ctrl-S to save the configuration.
# Start CTP.

Now, manually start your browser. Do not use the button on the General tab because that will automatically use the SSL port. Enter the URL pointing to your site, but on port 80. You should be redirected to port 443 and the protocol should change to HTTPS.