Menu
Free Trials
Table of contents

Mondrian / Сonfiguring secure HTTPS connection

Overview

All data that is sent by HTTP is not encrypted and can be intercepted. That’s why we have added an option to enable HTTPS for Accelerator. HTTPS encrypts all data that is sent from the client to Accelerator and vice versa. Please follow the steps below to configure secure HTTPS connection for your setup.

Requirements

  • Flexmonster Pivot Component v2.205 SITE edition or higher
  • Relational database and Mondrian schema for it
  • Java JRE 1.7+
  • Valid and trusted SSL certificate

Step 1: Import certificate to Java KeyStore

A Java KeyStore (JKS) is a repository of security certificates. JDKs provide a keytool utility to manipulate the keystore.

If you already have the private key in PKCS 12, just navigate to JRE/bin/ folder and execute the following:

keytool -importkeystore -destkeystore keystore.jks -srckeystore <private_key> -srcstoretype PKCS12

Where:

  • <private_key> – path to .p12 file with the private key (i.e. flexmonster.p12)

It will ask to enter a new password for keystore and a password for the private key. In a result, it will generate a keystore.jks file with imported private key inside. Copy this file to some location, it will be necessary for the next step.

Step 2: Enable HTTPS in Accelerator

After you have the certificate imported let’s enable the HTTPS in the Accelerator’s config. Open flexmonster.config file and modify/add the necessary parameters as follows:

HTTPS=true
KEY_STORE_PATH=<keystore_path>
KEY_STORE_PASSWORD=<keystore_password>
KEY_MANAGER_PASSWORD=<private_key_password>

Where:

  • <keystore_path> – path to JKS file (i.e. keystore.jks)
  • <keystore_password> – password for the keystore
  • <private_key_password> – password for the imported key

Available values for HTTPS parameter is true or false. By default HTTPS is disabled (false).

Accelerator is ready to be launched. Just execute the following command in terminal:

java -jar flexmonster-proxy-mondrian.jar

You can check the Accelerator is up and running by navigating to its URL in the browser (i.e. https://localhost:50006).

Step 3: Configure Flexmonster Pivot Component

Now it’s time to configure the client – Flexmonster Pivot Component. Let’s create a minimal configuration using JavaScript API (replace proxyUrl, catalog and cube parameters with your specific values):

var pivot = $("#pivotContainer").flexmonster({
	toolbar: true, 
	report: {
		dataSource: {
			dataSourceType: "mondrian",
			proxyUrl: "https://localhost:50006",
			dataSourceInfo: "MondrianFoodMart",
			catalog: "FoodMart",
			cube: "Sales",
			binary: true
		}
	},
	licenseKey: "XXXX-XXXX-XXXX-XXXX-XXXX"
});

Please note that proxyUrl now contains https://. That means that the data is protected and encrypted with your SSL certificate.