Run idempiere over https

[Éder Pereira]

Hi people;

I wanto to run idempiere 2.1 over https. So, I generate a certificate using certbot (letsencrypt), but I don't know where to put the certificate file to idempiere begins to response https requests. Can someone help me? Someone already did this? Thanks!

Éder Paulo Pereira

epHealth

+55 55 9-9171-5871

[Orlando Curieles]

Hi Paulo, I recomend you use nginx or HAProxy for this purpose.. 

Please check this links.

http://wiki.idempiere.org/en/Haproxy

http://wiki.idempiere.org/en/Securing_iDempiere

Regards

[Éder Pereira]

Hi Orlando, thanks for response;

I have many idempiere servers on amazon aws, and I have thought that I'll need a certificate for each instance. For me, it does not seem practical the fact to have one more instance for each idempiere server for run haproxy. Maybe I can to run on same idempiere server? What do you think about it?

Regards

Eder Paulo Pereira

epHealth

[Hiep Lq]

you need just one haproxy instance for all your idempiere instance.

--
You received this message because you are subscribed to the Google Groups "iDempiere" group.
To unsubscribe from this group and stop receiving emails from it, send an email to idempiere+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/idempiere/e4c9dcae-ef05-441f-bb27-1b1dc53df1bb%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--

Lê Quý Hiệp
Email: hie...@hasuvimex.vn
Skype: admin.hasuvimex

Company: Thanh Hoa Fishery Import - Export J.s.c  (Hasuvimex) DL 47

Add: Lot E, Le Mon Industrial Zone, Thanh Hoa, Vietnam

[Orlando Curieles]

Hi, you just need one instance, put your certificate on 443 port in redirect for each instance of adempiere over http port

[Éder Pereira]

Really? It's simpler than I thought. Would this server be a reverse proxy or something? Can I run using apache or nginx? Thank you very much Orlando.

[Éder Pereira]

One thing that maybe I did not make clear, all my idempiere servers on aws belong to different clients, so, one server running reverse proxy is enough?

[Hiep Lq]

yes.

--

You received this message because you are subscribed to the Google Groups "iDempiere" group.
To unsubscribe from this group and stop receiving emails from it, send an email to idempiere+unsubscribe@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/idempiere/5f79b835-988c-48a6-a508-386d59861931%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[Éder Pereira]

In this case a have to use virtual hosts OK?

Em qui, 4 de mai de 2017 23:30, 'Hiep Lq' via iDempiere <idem...@googlegroups.com> escreveu:

yes.

On Fri, May 5, 2017 at 6:16 AM, Éder Pereira <uni...@gmail.com> wrote:

One thing that maybe I did not make clear, all my idempiere servers on aws belong to different clients, so, one server running reverse proxy is enough?

Em quinta-feira, 4 de maio de 2017 10:41:51 UTC-3, Éder Pereira escreveu:

Really? It's simpler than I thought. Would this server be a reverse proxy or something? Can I run using apache or nginx? Thank you very much Orlando.

Em quinta-feira, 4 de maio de 2017 09:01:33 UTC-3, Orlando Curieles escreveu:

Hi, you just need one instance, put your certificate on 443 port in redirect for each instance of adempiere over http port

--

You received this message because you are subscribed to the Google Groups "iDempiere" group.

To unsubscribe from this group and stop receiving emails from it, send an email to idempiere+...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/idempiere/5f79b835-988c-48a6-a508-386d59861931%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--

Lê Quý Hiệp
Email: hie...@hasuvimex.vn
Skype: admin.hasuvimex

Company: Thanh Hoa Fishery Import - Export J.s.c  (Hasuvimex) DL 47

Add: Lot E, Le Mon Industrial Zone, Thanh Hoa, Vietnam

--
You received this message because you are subscribed to a topic in the Google Groups "iDempiere" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/idempiere/110vCcoDL-c/unsubscribe.
To unsubscribe from this group and all its topics, send an email to idempiere+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/idempiere/CAHZ0wEb7emDz%2BFrjYoJ6Y%2Bjycj1poTVTY6wU2SX_MLUcRe%3Dc_Q%40mail.gmail.com.

For more options, visit https://groups.google.com/d/optout.

--

A+;

Éder Paulo Pereira

+55 55 9171 5871

unijic at gmail dot com

https://www.sobreti.com.br

[Éder Pereira]

Hi there;

The problem was resolved. In my case, I use nginx working as a reverse proxy on each ec2 instance, in the same ec2 instance that I'm running the app, and then I use letsencrypt to generate the ssl certificate, that is free. Works fine for me, see https://poc.ephealth.com.br. Thanks for the answers, because of them I was able to reach this result.