| Author |
Tomcat ssl configuration error
|
michael yue
Ranch Hand
Joined: Nov 20, 2003
Posts: 204
|
|
Hello, For tomcat ssl configuration after i completed the setup, I got these weird symbols when I go to http://xxx.xxx.xxx.xxx:8443/ in my browser. The goes with http://xxx.xxx.xxx.xxx:8443/application/page.jsp and so on. But when i put https as in https://xxx.xxx.xxx.xxx:8443/ in my browser. i got page cannot be displayed. Those xxx is just some example for URL. Anyone face this problem before?
|
 |
Rajendar Goud
Ranch Hand
Joined: Mar 06, 2002
Posts: 220
|
|
Hi, for making SSL enabled in tomcat ,u need to edit the server.xml under conf folder. These are the steps <!-- Uncomment this for SSL support. You _need_ to set up a server certificate if you want this to work, and you need JSSE. 1. Add JSSE jars to CLASSPATH 2. Edit java.home/jre/lib/security/java.security Add: security.provider.2=com.sun.net.ssl.internal.ssl.Provider 3. Do: keytool -genkey -alias tomcat -keyalg RSA RSA is essential to work with Netscape and IIS. Use "changeit" as password. ( or add keypass attribute ) You don't need to sign the certificate. You can set parameter keystore and keypass if you want to change the default ( user.home/.keystore with changeit ) --> <!-- <Connector className="org.apache.tomcat.service.PoolTcpConnector"> <Parameter name="handler" value="org.apache.tomcat.service.http.HttpConnectionHandler"/> <Parameter name="port" value="8443"/> <Parameter name="socketFactory" value="org.apache.tomcat.net.SSLSocketFactory" /> </Connector> --> try this out.. cheers Raj
|
 |
michael yue
Ranch Hand
Joined: Nov 20, 2003
Posts: 204
|
|
|
I have done all the steps u said already before I posted the original question. I can import the cert and the ssl seem to be working fine when i run catalina.sh run. But still the ssl pages cannot display.
|
 |
Ishu Sharma
Greenhorn
Joined: Apr 18, 2005
Posts: 21
|
|
Hi, I am facing exactly the same problem you faced. Did you find out the solution? Please let me know, I need it asap. Thanks Ish
|
I'd rather be a could-be if I cannot be an are; because a could-be is a maybe who is reaching for a star.
|
 |
 |
|
|
subject: Tomcat ssl configuration error
|
|
|