Force HTTPS redirect with FileCatalyst Central
Posted by Chris Kuhlman, Last modified by Aly Essa on 13 April 2017 08:48 AM

Overview

This article will outline how to force FileCatalyst Central to redirect all traffic to use an HTTPS connection.

Environment

FileCatalyst Central v3.6 and later.

Resolution

To force a redirect of all traffic to HTTPS automatically, we need to edit the web.xml file. 

  1. Shutdown the FileCatalyst Central Service.
  2. Open the web.xml file in a text editor. It is located in /<path to FileCatalyst Central>/FileCatalyst Central/www/Web Console/WEB-INF/. 
    A sample path in the Windows Environment is, C:\FileCatalyst Central\www\Web Console\WEB-INF\.

  3. Edit the web.xml and add the following lines above the last </web-app> (closing element):

      <!-- Require HTTPS for everything except /img (favicon) and /css. -->
      <security-constraint>
          <web-resource-collection>
              <web-resource-name>HTTPSOnly</web-resource-name>
              <url-pattern>/*</url-pattern>
          </web-resource-collection>
          <user-data-constraint>
              <transport-guarantee>CONFIDENTIAL</transport-guarantee>
          </user-data-constraint>
      </security-constraint>
      <security-constraint>
          <web-resource-collection>
              <web-resource-name>HTTPSOrHTTP</web-resource-name>
              <url-pattern>*.ico</url-pattern>
              <url-pattern>/img/*</url-pattern>
              <url-pattern>/css/*</url-pattern>
          </web-resource-collection>
          <user-data-constraint>
              <transport-guarantee>NONE</transport-guarantee>
          </user-data-constraint>
      </security-constraint>

  4. Save and close the web.xml file and restart the FileCatalyst Central Service.

Comments (0)