You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by TJ <th...@netscape.net> on 2016/09/26 11:45:50 UTC
SSL setup - Apache Tomcat service won't start
Hi all
I have Apache Tomcat/9.0.0.M10 on Windows 10 64bit and want to setup
SSL. Am following
https://tomcat.apache.org/tomcat-9.0-doc/ssl-howto.html and gone
through the steps of creating the keystore with a single self signed
cert using:
"%JAVA_HOME%\bin\keytool" -genkey -alias tomcat -keyalg RSA
Thats fine and confirmed the certificate is in there.
Next I alter the server.xml file as follows and go to restart the Tomcat
service:
<!-- Define a SSL/TLS HTTP/1.1 Connector on port 8443
This connector uses the NIO implementation with the JSSE
engine. When
using the JSSE engine, the JSSE configuration attributes must
be used.
-->
<Connector port="8443"
protocol="org.apache.coyote.http11.Http11NioProtocol"
maxThreads="150" SSLEnabled="true"
keystoreFile="c:\users\khisanth\.keystore" keystorePass="changeit" />
<SSLHostConfig>
<Certificate
certificateKeystoreFile="conf/localhost-rsa.jks"
type="RSA" />
</SSLHostConfig>
</Connector>
Problem is the service will not restart. If I remove the added comments
it will restart fine. I am logged in as administrator. The apache
server status page does mention HTTPS.
Any ideas?
thanks
khisanth
Re: SSL setup - Apache Tomcat service won't start
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Khisanth,
On 9/26/16 7:45 AM, TJ wrote:
> I have Apache Tomcat/9.0.0.M10 on Windows 10 64bit and want to
> setup SSL. Am following
> https://tomcat.apache.org/tomcat-9.0-doc/ssl-howto.html and gone
> through the steps of creating the keystore with a single self
> signed cert using:
>
> "%JAVA_HOME%\bin\keytool" -genkey -alias tomcat -keyalg RSA
>
> Thats fine and confirmed the certificate is in there.
>
> Next I alter the server.xml file as follows and go to restart the
> Tomcat service:
>
> <!-- Define a SSL/TLS HTTP/1.1 Connector on port 8443 This
> connector uses the NIO implementation with the JSSE engine. When
> using the JSSE engine, the JSSE configuration attributes must be
> used. -->
>
> <Connector port="8443"
> protocol="org.apache.coyote.http11.Http11NioProtocol"
> maxThreads="150" SSLEnabled="true"
> keystoreFile="c:\users\khisanth\.keystore" keystorePass="changeit"
> /> <SSLHostConfig> <Certificate
> certificateKeystoreFile="conf/localhost-rsa.jks" type="RSA" />
> </SSLHostConfig> </Connector>
>
> Problem is the service will not restart. If I remove the added
> comments it will restart fine. I am logged in as administrator.
What do the logs say?
%CATALINA_BASE%\logs\catalina.log
or, if running as a Windows Service:
%CATALINA_BASE%\logs\stdout-*.log
While debugging startup errors, it's usually helpful to run Tomcat
interactively from the command prompt, like this:
C:\> %CATALINA_HOME%\bin\startup.bat
Then you get the stdout log right there in the terminal, including any
errors with the connector configurations.
> The apache server status page does mention HTTPS.
Apache httpd or Apache Tomcat?
- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=ZYYx
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org