I want to use https:// over LocalHost tomcat (vista) but failed, I used

[Leonidas Savvides]

I want to use https:// over LocalHost tomcat (vista) but failed, I used
keytool -genkey -alias tomcat -keyalg RSA -keystore C:/Users/User/.keystore -validity 365
Is it the correct folder tomcat looks by default(C:\Users\User\)?
C:\Program Files\Apache Software Foundation\Apache Tomcat 6.0.18\bin>
I use port: 443.
https://localhost/webhomecover8/welcome.jsp simple JSP
This implies that https://localhost/ will show tomcat manager? please note this appers "Internet Explorer cannot display the webpage"...in my screen for https://localhost/.

[Leonidas Savvides]

Is it the correct folder tomcat looks by default(C:\Users\User\)?

[Joachim Rohde]

Have you included the connector in the server.xml?
Something like:

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="C:/User/User/.keystore"
keystorePass="changeit"/>

And be aware that sometimes it's necessary to exclude the line

<Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />

For more information have a look at http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html

[edit]
And in your example you forgot to include the port in your URL.

[Leonidas Savvides]

same problem, after your suggested two steps done:

http://localhost:8080/webhomecover5/welcome.jsp view success
http://localhost:8080/ view success

problem:
https://localhost:8443/webhomecover5/welcome.jsp view "Internet Explorer cannot display the webpage"

https://localhost:8443/manager/html view "Internet Explorer cannot display the webpage"

in the certificate creation last 2 inputs, are Tomcat password, correct?

[Rene Larsen]

Do you see that the connector for https port 8443 is started in the console (or catalina log file) ??

When I generate a home made keystore with the keytool, I use this syntax - and this one is working with my Tomcat(s) (all versions):

keytool -v -genkey -alias <SOME_ALIAS> -keyalg RSA -keysize 2048 -sigalg SHA1withRSA -keypass <THE_PASSWD> \  
        -keystore <THE_KEYSTORE_NAME> -storepass <THE_PASSWD> -storetype jks -validity 3650 \  
        -dname "cn=<NAME>, ou=Java Software Code Signing, o=<ORGINIZATION>, l=<CITY>, c=<COUNTRY_CODE e.g. US>"

Replace the <..> with your own values...

[Leonidas Savvides]

solved, found:

keystoreFile="C:/User/User/.keystore"
this must be
keystoreFile="C:/Users/User/.keystore"

and also upon creation of cert password start/end must mutch....