Enabling SSL Connections

To avoid sensitive information like Drupal passwords and PHP session cookies exposed to third parties, enable SSL connections for a secured network.

Prerequisites

To launch Developer Portal in SSL mode, SSL should also be enabled in API Management servers as well as Gateway servers.

To configure SSL in gateway server, please refer to the Configuring the Jetty Server with SSL Support section.

To avoid security exceptions in browsers, make sure the common names specified in SSL certificates rightly correspond to the domain names of API management, gateway and web servers.

Enabling SSL

To enable SSL Connections on the Drupal Developer Portal using Web Server, perform the following actions:

1. Generate a Self Signed Certificate using the command below which uses openssl to create a basic certificate:

   CODE

   openssl req -x509 -nodes -days 365 -newkeyrsa:2048 -keyoutdrupal.key -out drupal.crt

2. Configure the Apache server to enable SSL Connections y making the following changes at /path/to/your/<WebServer>/apache2/conf:

   1. Create a file named "drupal-vhosts.conf" in the extra folder.

   2. Include this file in the httpd.conf folder using the following command:

      CODE

      Include conf/extra/drupal-vhosts.conf

3. Add the below commands to the drupal-vhosts.conf file:

   To enable SSL connections, "ssl_module" is required:

   CODE

   LoadModule ssl_module modules/mod_ssl.so

   To load the SSL certificate file that is created:

   CODE

   <VirtualHost *:443>
      SSLEngine on
      SSLCertificateFile "/path/to/your/Certificate/File/drupal.crt"
      SSLCertificateKeyFile "/path/to/your/Certificate/File//drupal.key"
   </VirtualHost>

   

   443 is the default SSL port for the Apache server.

   To Redirect the URL from http:// to https://

   CODE

   <VirtualHost *:80>
      Redirect /FioranoDeveloperPortal https://localhost/FioranoDeveloperPortal
   </VirtualHost>

   

   80 is the default HTTP port for the Apache server.

If there is a domain name where the project is hosted, add the following under VirtualHost directives:

CODE

ServerName <Domain Name>

For further details, refer to https://www.drupal.org/https-information.