# Enable SSL

You can configure Enterprise Edition to take SSL traffic only by passing following properties in the launch-yc-server.sh script:

  • keystore file location
  • keystore password
  • --enable-ssl flag

Say suppose your current launch-yc-server.sh script looks like this:

java -Xms2g -Xmx4g -DlogDir=. -DuploadDir=. -jar webapp-runner.jar -AconnectionTimeout=3600000 --port 8080 yc.war &
1

Change it to:

java -Xms2g -Xmx4g -DlogDir=. -DuploadDir=. -Djavax.net.ssl.keyStore=/opt/https.jks -Djavax.net.ssl.keyStorePassword=password1 -jar webapp-runner.jar -AconnectionTimeout=3600000 --port 8080 --enable-ssl yc.war &
1

# Encrypt SSL Keystore Password

The application supports passing the SSL keystore password in an encrypted format for enhanced security. For details on how to encrypt the password, please refer to the Encrypt Configuration File page.

Once you have your encrypted password (e.g., cb6qP2+aM1R3CT3kjL9rKw==), you can include it in the -Djavax.net.ssl.keyStorePassword parameter in the launch script, as shown below:

java -Xms2g -Xmx4g -DlogDir=. -DuploadDir=. -Djavax.net.ssl.keyStore=/opt/https.jks -Djavax.net.ssl.keyStorePassword=cb6qP2+aM1R3CT3kjL9rKw== -jar webapp-runner.jar -AconnectionTimeout=3600000 --port 8080 --enable-ssl yc.war &
1

Please ensure that the yCrash is configured properly for decrypting the encrypted SSL keystore password. For detailed instructions, please refer to the Configure yCrash Server for Decryption

← Support Email →