linux:tomcat

Tabla de Contenidos

Tomcat
- Instalación de un servidor Tomcat 6
Monitorización Tomcat
- SSL
- Hardening

Tomcat

Instalación de un servidor Tomcat 6

Para instalar tomcat directamente desde los repositorios ejecutar <sxh> yum install java yum install tomcat6 tomcat6-webapps tomcat6-admin-webapps</sxh>

http://inteligenciaux.wordpress.com/2011/01/07/instalacion-tomcat-6-en-redhat-enterprise-5-5-x86_64/#more-1637
Script de arranque con upstart https://gist.github.com/witscher/2924017

Upstart (http://upstart.ubuntu.com/cookbook/) is an event-based replacement for the /sbin/init daemon which handles starting of tasks and services during boot, stopping them during shutdown and supervising them while the system is running.

Monitorización Tomcat

Para monitorizar por JMX tenemos varias herramientas

jconsole Java SDK
MC4J MC4J
https://code.google.com/p/psi-probe/

SSL

http://www.hackplayers.com/2015/03/configurar-ssl-en-tomcat-parte-1.html
http://www.hackplayers.com/2015/03/configurar-ssl-en-tomcat-parte-2.html
http://www.securitybydefault.com/2012/04/configuracion-ssl-de-tomcat.html

Hardening

http://bastionado.blogspot.com.es/2012/04/bastionado-de-apache-tomcat-i.html
http://bastionado.blogspot.com.es/2012/04/bastionado-de-apache-tomcat-ii.html
http://bastionado.blogspot.com.es/2011/03/tomar-ventaja-del-manager-de-tomcat.html
http://www.securitybydefault.com/2012/04/seguridad-en-tomcat-jsessionid-en-la.html
http://inteligenciaux.wordpress.com/2010/10/27/aseguramiento-tomcat/#more-1477
http://inteligenciaux.wordpress.com/2010/11/25/md5-password-tomcat/
http://www.tomcatexpert.com/blog/2011/11/02/best-practices-securing-apache-tomcat-7
https://www.owasp.org/index.php/Securing_tomcat