# Is it possible to secure ApplinX SOA (API) through SSL and Tomcat Valve configurations?

**URL:** <https://techcommunity.softwareag.com/t/is-it-possible-to-secure-applinx-soa-api-through-ssl-and-tomcat-valve-configurations/281283>\
**Category:** Forum\
**Tags:** ApplinX\
**Created:** [July 22, 2023, 9:46pm UTC](https://techcommunity.softwareag.com/t/is-it-possible-to-secure-applinx-soa-api-through-ssl-and-tomcat-valve-configurations/281283 "2023-07-22T21:46:37Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![leonard.solomyak](https://sea1.discourse-cdn.com/techcommunity/user_avatar/techcommunity.softwareag.com/leonard.solomyak/32/18779_2.png) [@leonard.solomyak](https://techcommunity.softwareag.com/u/leonard.solomyak)\
**Post date:** [July 22, 2023, 9:46pm UTC](https://techcommunity.softwareag.com/t/is-it-possible-to-secure-applinx-soa-api-through-ssl-and-tomcat-valve-configurations/281283/1 "2023-07-22T21:46:37Z")

</div>

#### _ **Product/components** used and **version/fix** level:_

ApplinX 10.11 1033

#### _Detailed explanation of the problem:_

Is it possible to

(1) configure SSL certificates and  
(2) implement address restrictions

via the embedded tomcat ?

For instance,

1. Could SSL configuration be added into **../ApplinX/conf/server.xml**?

2. It is recommended for generic Tomcat implementation to set up access restriction to your web-application for the certain IP addresses, add the following strings to  
**/opt/tomcat/webapps/{web-application name}/META-INF/context.xml**

```auto
<Context antiJARLocking="true" path="/">
 <Valve className="org.apache.catalina.valves.RemoteIpValve" />
 <Valve className="org.apache.catalina.valves.RemoteAddrValve" deny="{IP_address}" />
</Context>

```

However, there is no **context xml** in the above directory for SOA applications, so could it work adding this instruction to **../ApplinX/conf/content.xml**?

#### _Error messages / **full error** message screenshot / **log** file:_

N/A

#### _Question related to a **free trial** , or to a **production (customer)** instance?_

licensed

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/techcommunity/original/3X/c/d/cd19967bb605d28a72d77eb83a1cae22f3df2eb8.svg) [@system](https://techcommunity.softwareag.com/u/system)\
**Post date:** [January 18, 2024, 9:46pm UTC](https://techcommunity.softwareag.com/t/is-it-possible-to-secure-applinx-soa-api-through-ssl-and-tomcat-valve-configurations/281283/2 "2024-01-18T21:46:56Z")

</div>

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.