AppWorx, Dollar Universe and Sysload Community

 View Only
  • 1.  Univiewer console webstart HTTP vs HTTPS

    Posted Jul 10, 2020 03:29 PM
    Hello, 

    We have UVC version 6.9.21, and launch it via an http://hostname>:8080/univiewer_console_webstart.  It is working now.  However, our LAN team is asking if we can launch it using https.  Is that possible?  If so, what url will we use?

    Thanks in advance for your help.
    Gerry


  • 2.  RE: Univiewer console webstart HTTP vs HTTPS

    Posted Oct 15, 2020 09:49 AM
    Hello, I know this request has been sitting for a while now, but no one has responded to it.  I hope someone can assist me. Thanks.


  • 3.  RE: Univiewer console webstart HTTP vs HTTPS

    Posted Oct 15, 2020 04:45 PM
    I do not know the UVC product.  But upgrading a solution from HTTP to HTTPS requires installation of an SSL certificate, and usually the use of a port other than 8080.  Hopefully you can find SSL installation instructions in the product documentation.

    ------------------------------
    Pete Wirfs
    SAIF Corporation
    Salem Oregon USA
    ------------------------------



  • 4.  RE: Univiewer console webstart HTTP vs HTTPS

    Posted Oct 16, 2020 10:17 AM
    Hello Gerry,

    To use UVC/UVMS with SSL, you do indeed need a certificate as @Pete Wirfs mentioned.

    You can find a section of our documentation that outlines how to accomplish this here:

    https://docs.automic.com/documentation/webhelp/english/ALL/components/DU_AS/latest/%20%20Dollar%20Universe%20Guides/help.htm#UV_adm/SSL%20Communications.htm%3FTocPath%3DUniviewer%2520Administration%2520Guide%7CConfiguration%2520and%2520Maintenance%7CSSL%2520Communications%7C_____0

    I hope that helps!



    ------------------------------
    Cordialement,
    Support Automation Apta
    ------------------------------



  • 5.  RE: Univiewer console webstart HTTP vs HTTPS

    Posted Oct 16, 2020 10:32 AM
    Thanks to Pete and Support team.


  • 6.  RE: Univiewer console webstart HTTP vs HTTPS

    Posted Nov 04, 2020 04:40 PM
    Hy Gerry,

    First, With https/SSL, you don't really need to use a certified certificate, You can create a dummy one to signed the net flows

    But here the situation is quite different.
    I saw into you post title "WebStart". WebStart equals a standalone one. The only difference is that a servlet container (Tomcat for example) can deliver it to you locally onto you desktop
    SSL the tomcat here is possible but the flow will be in plain clear. The servlet is working as a standalone console (You need to switch all your Univiewer modules to SSL) You can find this into the Admin documentation

    The Other way to signed the User flow is the use of the "Webconsole" (instead of webstart) mode the Servlet delivered by Tomcat is now in A Client/Server flow
    * You separate the User Network and the Servers/DUAS networks by using Webconsole (because only the Servlet Server Part communicates with the DUAS, not the console)
    * You can sign the User communication by only switch the Tomcat to SSL and not the Console/UVMS.
    * If you want to secure also the LDAP authent, you need to SSL on the UVMS LDAP config part
    * If you want to secure also the Serlver/server part to DUAS and components, you nee to SSL the UVMS... and also all the DUAS

    If you use WebStart, that means that it's not perfectly secured because User network / DUAS network are linked
    The only way to solve this is providing the use of the Webstart on an VPN/Citrix/VM but not locally on your local dektop

    May can help.
    Regards
    Eric