Setup without Reverse Proxy
The application must always be configured with SSL to ensure secure communication.
There are two supported deployment scenarios when no reverse proxy is used:
1. Application runs under PubServer (shared domain & certificate)
Target URL:
https://pubserver.domain/dm/
In this setup, the application is deployed as a path of the PubServer and reuses the existing SSL certificate from PubServer.
Configuration
Adjust the Spring Boot configuration file (application.properties or application.yml)
# Enable SSL
server.ssl.enabled=true
# Reuse PubServer keystore
server.ssl.key-store=../glassfish/payara6/glassfish/domains/pubserver/config/keystore.p12
server.ssl.key-store-password=your_password
server.ssl.key-store-type=PKCS12
server.ssl.key-alias=pubserver_alias
2. Application runs on its own domain (separate SSL)
Target URL:
https://application.domain/dm/
In this setup, the application runs independently with its own domain and SSL certificate.
This approach is recommended because:
- Clear separation between PubServer and the application
- Easier certificate management (renewal, rotation)
- Better scalability and deployment flexibility
Requirements
- A valid SSL certificate for
application.domain - Keystore generated (e.g.,
.p12or.jks) - Proper DNS configuration pointing to the application server
Configuration
Adjust the Spring Boot configuration file (application.properties or application.yml)
# Enable SSL
server.ssl.enabled=true
# Application-specific keystore
server.ssl.key-store=/path/to/your/keystore.p12
server.ssl.key-store-password=your_password
server.ssl.key-store-type=PKCS12
server.ssl.key-alias=your_alias