JBoss Tomcat y WebLogic

JBoss Tomcat y WebLogic

Este post ayuda a revisar procesos Java, localizar logs, configurar SSL y realizar comprobaciones basicas en JBoss, Tomcat, WebLogic y WAS.

Revisar procesos Java

ps -ef | grep -E 'java|jboss|tomcat|weblogic' | grep -v grep
jps -lv

Logs habituales

tail -f /opt/<APP>/logs/server.log
tail -f /opt/<APP>/logs/catalina.out
tail -f /opt/<APP>/domains/<DOMINIO>/servers/<SERVIDOR>/logs/<SERVIDOR>.log

Tomcat: keystore y conector SSL

<Connector port="8443"
           protocol="org.apache.coyote.http11.Http11NioProtocol"
           SSLEnabled="true"
           keystoreFile="/opt/tomcat/conf/app.jks"
           keystorePass="<SECRETO>"
           clientAuth="false"
           sslProtocol="TLS" />

JBoss: realm seguro

/opt/jboss/bin/jboss-cli.sh --connect
/subsystem=elytron/key-store=httpsKS:add(path=app.jks,relative-to=jboss.server.config.dir,credential-reference={clear-text="<SECRETO>"},type=JKS)
/subsystem=elytron/key-manager=httpsKM:add(key-store=httpsKS,credential-reference={clear-text="<SECRETO>"})
/subsystem=elytron/server-ssl-context=httpsSSC:add(key-manager=httpsKM,protocols=["TLSv1.2","TLSv1.3"])
reload

Ciphers

Priorizar TLS moderno y retirar protocolos antiguos:

TLSv1.2
TLSv1.3

Evitar cuando sea posible:

SSLv2
SSLv3
TLSv1.0
TLSv1.1
RC4
3DES
NULL
EXPORT

WebLogic: WLST basico

connect('<USUARIO>', '<SECRETO>', 't3://admin.example.local:7001')
domainRuntime()
serverRuntime()
disconnect()
exit()

WebLogic datasource

connect('<USUARIO>', '<SECRETO>', 't3://admin.example.local:7001')
edit()
startEdit()
cd('/JDBCSystemResources/<DATASOURCE>/JDBCResource/<DATASOURCE>')
disconnect()
exit()

WAS

serverStatus.sh -all
stopServer.sh <SERVIDOR>
startServer.sh <SERVIDOR>