Windchill System Administrator's Guide

Server Codebase Property
Using HTTPS Protocol
The server codebase property, wt.server.codebase, specifies the URL to the
Windchill codebase virtual directory used by Windchill servers when producing
URLs to static files. Most often, the server codebase property is used in a
tag within dynamic HTML pages. This allows relative HREFs to be
used within the page for static resources, such as style sheets and images. It is also
used by client-side Java code to access files from the server's codebase, such as
wt.properties or JAR files.
All files in the Windchill codebase virtual directory can be available
anonymously, except JSPs. This is because the dynamic nature of the JSPs
typically requires that most pages are unique to a particular user.
When standalone Java applications are run outside of a browser, some files in the
server codebase must be available anonymously because the HTTP protocol
handler in the standard Java Runtime Environment, does not support
authentication challenges. These files include wt.properties and JAR files.
HTTPS is the HTTP protocol layered over the Secure Socket Layer (SSL)
protocol to allow secure data transfer using encrypted data streams. This section
describes the Windchill configuration necessary. It assumes the web server has
been set up for HTTPS. See your web server documentation for details on this
procedure. RMI is not encrypted, but may be tunneled over HTTPS. See RMIover-HTTP
for more information.
The Java 2 platform does not include default support for HTTPS until version 1.4.
The Java Secure Socket Extension (JSSE) enables secure communication,
including HTTPS. To install this extension into a pre-1.4 Java runtime:
1. Install the JSSE JAR files. Copy jsse.jar, jnet.jar, and jcert.jar from
/lib to /lib/ext
2. Add the JSSE provider to your list of approved security providers. Edit
/lib/security/java.security to contain
security.provider.n=com.sun.net.ssl.internal.ssl.Provider where n is the next
provider preference available.
Add an HTTPS protocol handler to the runtime. Windchill servers have this
set by default, so no action is needed there. Any java application, including
the servlet engine process, that creates URL objects with an HTTPS protocol
will need to set a system property on the command line.
Windchill includes a HTTPS protocol handler via the HTTPClient package.
To use, specify "-Djava.protocol.handler.pkgs=HTTPClient".
Alternatively, the JSSE includes a handler. To use it, specify:
"-Djava.protocol.handler.pkgs=com.sun.net.ssl.internal.www.protocol"
Windchill Considerations for Security Infrastructures B-5