How to configure AEM for SSL only? | Community
Skip to main content
OlivBur
OlivBur
Level 2
March 28, 2018
Solved

How to configure AEM for SSL only?

  • March 28, 2018
  • 3 replies
  • 4654 views

Hi,

I have followed this tutorial: SSL By Default

and now I would like to disable the "http" Access.

Where do I Need to configure this? There is a Felix HTTP Service OSGi configuration, but I'm not very sure how the Granite SSL Connector Config relates to the Felix HTTP Service config.

I tried once to simply disable http, but then I couldn't Access AEM anymore, also not via https.

Do I Need to enable then "https" in the Felix HTTP Service config? And does this config then uses the keystore from the ssl-service user?

Thanks for clarity here.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by vish.dhaliwal

Hello,

org.apache.felix.http (Apache Felix Jetty Based Http Service) seems to be deprecated [1]. The SSL settings are done through Granite SSL config com.adobe.granite.jetty.ssl.internal.GraniteSslConnectorFactory, which is why EM is not able to startup with https port.

For disabling http, you can route external traffic over https via Dispatcher or create a mapping under the etc/map to rewrite all the http requests to https.

[1] https://helpx.adobe.com/experience-manager/6-4/sites/developing/using/reference-materials/javadoc/deprecated-configurations.html

Regards,

Vishu

3 replies

kautuk_sahni
Community Manager
kautuk_sahniCommunity Manager
Community Manager
April 6, 2018

Go to http://localhost:4502/system/console/configMgr

and Configure "Apache Felix Jetty Based Http" and remove check from Enable HTTP.

-kautuk

Kautuk Sahni
OlivBur
OlivBurAuthor
Level 2
April 10, 2018

Hi @kautuksahni,

I have done this, but then the AEM instance is not available anymore, also not via the SSL configured port as I have already mentioned in my initial question.

I have checked this on a vanilla AEM instance.

V
Adobe Employee
vish.dhaliwalAdobe EmployeeAccepted solution
Adobe Employee
April 18, 2019

Hello,

org.apache.felix.http (Apache Felix Jetty Based Http Service) seems to be deprecated [1]. The SSL settings are done through Granite SSL config com.adobe.granite.jetty.ssl.internal.GraniteSslConnectorFactory, which is why EM is not able to startup with https port.

For disabling http, you can route external traffic over https via Dispatcher or create a mapping under the etc/map to rewrite all the http requests to https.

[1] https://helpx.adobe.com/experience-manager/6-4/sites/developing/using/reference-materials/javadoc/deprecated-configurations.html

Regards,

Vishu

G
gspatil11-1
Level 2
December 14, 2022

Hi @vish.dhaliwal,
I am also facing the same issue. When tried to refer below blog, it says 404
https://helpx.adobe.com/experience-manager/6-4/sites/developing/using/reference-materials/javadoc/deprecated-configurations.html

Can you please share details?

Regards,

G Patil

Terms & ConditionsAccessibility statement

Loading footer...