Using A Single Ssl Port - Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual

Chapter 13. Basic Subsystem Management
<Connector port="9180" maxHttpHeaderSize="8192"
# Define a SSL HTTP/1.1 Connector on port 8443
<Connector port="9443" maxHttpHeaderSize="8192"
4. Restart the subsystem.
To change a port number for a TPS subsystem:
1. Stop the TPS instance.
2. Open the instance's configuration directory.
cd /var/lib/subsystem_name/conf
3. Open the httpd.conf file, and edit the non-SSL port number. For example:
Listen 0.0.0.0:7888
4. Open the nss.conf file, and edit the SSL port numbers. For example:
Listen 0.0.0.0:7889
<VirtualHost _default_:7889>
5. Open the CS.cfg file, and edit the both the SSL and non-SSL port numbers. For example:
service.securePort=7889
service.unsecurePort=7888
op.format.tokenKey.issuerinfo.value=http://server.example.com:7888
6. Restart the subsystem.

13.4.2. Using a Single SSL Port

It is possible to use a single SSL port instead of separated ports for subsystem services.
CAUTION
Although using a single SSL port is supported, this is a legacy configuration and may be
obsoleted.
1. Stop the subsystem instance.
2. Open the instance's configuration directory.
cd /var/lib/subsystem_name/conf
3. Open the server.xml file, and comment out the additional admin and end entities entries in the
<Connections named="Admin|EE"> lines.
4. Restart the subsystem.
308