Can't Get SSL/HTTPS To Work

[Anthony Watson]

I'm trying to get HTTPS to work for my JBoss/Tomcat. I generated a key store and also did the following but it does not work.

I added to C:\java\jboss-3.2.1_tomcat-4.1.24\server\default\deploy\jbossweb-tomcat.sar\META-INF\jboss-service.xml the following:

 
<mbean
      code="org.jboss.security.plugins.JaasSecurityDomain"
      name="jboss.security:service=JaasSecurityDomain,domain=RMI+SSL">
      <constructor>
        <arg type="java.lang.String" value="RMI+SSL"/>
      </constructor>
      <attribute name="KeyStoreURL">ssl/ssl.keystore</attribute>
      <attribute name="KeyStorePass">changeit</attribute>
</mbean>

I know that I need to add something like the following somewhere, but I don't know where:

  
<Connector className="org.apache.catalina.connector.http.HttpConnector"
               port="443"
               scheme="https"
               secure="true">
               <Factory
                 className="org.jboss.web.catalina.security.SSLServerSocketFactory"
                 securityDomainName="java:/jaas/RMI+SSL"
                 clientAuth="false"
                 protocol="TLS" />
</Connector>

Please give me some guidance on this. I am using JBoss 3.2.1. Any help would be greatly appreciated as I am feeling like and like and like
[ July 08, 2004: Message edited by: Anthony Watson ]

[Anthony Watson]

After much torture, I figured out that JBoss was failing to start properly because it couldn't find the keystore. To enable https/ssl, you just need to create a keystore. I put mine in jboss-3.2.1_tomcat-4.1.24\server\default\conf. Then, go to the jboss-3.2.1_tomcat-4.1.24\server\default\deploy\jbossweb-tomcat.sar\META-INF file and insert the following xml below the regular http connector xml:

<!-- A HTTPS  Connector on port 8443 -->
<Connector className="org.apache.catalina.connector.http.HttpConnector"
           port="8443"
           scheme="https"
           secure="true">
     <Factory                        className="org.jboss.web.catalina.security.SSLServerSocketFactory"
                  keystoreFile="${jboss.server.home.dir}/conf/server.keystore"
          keystorePass="changeit" 
          securityDomainName="java:/jaas/RMI+SSL"
          clientAuth="false"
          protocol="TLS" />
</Connector>