Setting up Enterprise Portal to create secure portlets

This section describes the steps required to set up Secure Sockets Layer (SSL) and to turn on portal security parameters that enable the creation of secure portlets.

Setting up SSL for secure portlet creation

Copy jnet.jar, jcert.jar, and jsse.jar from $SYBASE/EAServer/Webservices/java to $SYBASE/EAServer/java/lib on UNIX and from %SYBASE%\EAServer\Webservices\java to %SYBASE%\EAServer\java/lib on Windows.

Modify %JAGUAR%\bin\serverstart.bat (Windows) or $JAGUAR/bin/serverstart.sh (UNIX) as follows:

Add these lines at the beginning of Set EAS_CLASSPATH_P1.

Windows:

set
EAS_CLASSPATH_P1=%EAS_CLASSPATH_P1%;%JAGUAR%\java\lib\jsse.jar

set
EAS_CLASSPATH_P1=%EAS_CLASSPATH_P1%;%JAGUAR%\java\lib\jnet.jar

set
EAS_CLASSPATH_P1=%EAS_CLASSPATH_P1%;%JAGUAR%\java\lib\jcert.jar

UNIX:

set
EAS_CLASSPATH_P1=$EAS_CLASSPATH_P1;$JAGUAR/java/lib/jsse.jar

set
EAS_CLASSPATH_P1=$EAS_CLASSPATH_P1;$JAGUAR/java/lib/jnet.jar

set
EAS_CLASSPATH_P1=$EAS_CLASSPATH_P1;$JAGUAR/java/lib/jcert.jar

Add these lines at the beginning of Set EAS_BOOTCLASSPATH_P1:

Windows:

set EAS_BOOTCLASSPATH_P1=%EAS_BOOTCLASSPATH_P1%;

   %JAGUAR%\java\lib\jsse.jarset EAS_BOOTCLASSPATH_P1=%EAS_BOOTCLASSPATH_P1%;
   %JAGUAR%\java\lib\jnet.jarset EAS_BOOTCLASSPATH_P1=%EAS_BOOTCLASSPATH_P1%;
   %JAGUAR%\java\lib\jcert.jar

UNIX:

set EAS_BOOTCLASSPATH_P1=$EAS_BOOTCLASSPATH_P1;
   $JAGUAR/java/lib/jsse.jarset EAS_BOOTCLASSPATH_P1=$EAS_BOOTCLASSPATH_P1;
   $JAGUAR/java/lib/jnet.jarset EAS_BOOTCLASSPATH_P1=$EAS_BOOTCLASSPATH_P1;
   $JAGUAR/java/lib/jcert.jar

In a text editor, open java.security, which is located in %SYBASE%\Shared\jdk1.3.1_06\jre\lib\security on Windows and in $SYBASE/Shared/jdk1.3.1_06/jre/lib/security on UNIX, and add this line:
```
security.provider.2=com.sun.net.ssl.internal.ssl.Provider
```

Enabling portal security

The final step in setting up the portal to create secure portlets is to enable the portal’s security parameters in the global.properties.xml master configuration file.

In a text editor, open global.properties.xml, which is located in the Repository/WebApplication/onepage/config subdirectory of your EAServer installation.

In the Global Properties group, locate the “secure” property and set the value to “on”:

<Property name="secure" value="on" description="(on/off). on if HTTPS is enabled for the web-container. HTTPS will be used for login and registration" menugroup="-1" />

Optionally, you can also set the “turnOffSecurePassword” property to “true” so you are not always prompted for another password.

<Property name="turnOffSecurePassword" value="@SECURE_PASSSWD_OFF@" description="Turn on/off the usage of the secure password prompting by PI when using http portlets created from Studio. Default is on" menugroup="-1" />

Save your changes in global.properties.xml and exit the text editor.
Restart or refresh EAServer to implement the changes.