You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Ashok Kumar <as...@gmail.com> on 2009/12/02 01:07:06 UTC
ssl
Hi,
We are using tomcat 6.0.20. We installed the self signed certificate, its
working fine.
Now we installed the CA (goDaddy) certificate in order to use CA certificate
and updated the server.xml and restarted the tomcat server. But tomcat ssl
port is still picking the old self-signed certs. Do you have any idea why it
is not picking the godaddy certificates? I mean can you point me what other
places of tomcat server, I need to look so that it can pick the goDaddy
certificates.
Thanks
Ashok
Re: ssl
Posted by Pid <pi...@pidster.com>.
On 02/12/2009 18:25, Jeffrey Janner wrote:
> Unfortunately, the ssl-howto.html does not cover the use of the SSLCertificateChainFile connector directive, which he will need to add if using the native APR library, since GoDaddy is a secondary CA. In fact, it doesn't mention anything about intermediate certificate chains for either JAVA or APR.
>
> There was a good Tomcat 5.5 doc on the APR (forgot the link) that covered how to use the SSLCertificateChainFile directive.
If the docs are missing information, you can always supply it in the
form of a patch.
p
> -----Original Message-----
> From: Christopher Schultz [mailto:chris@christopherschultz.net]
> Sent: Wednesday, December 02, 2009 8:53 AM
> To: Tomcat Users List
> Subject: Re: ssl
>
> Unfortunately, this document is full of confusion and incorrect
> instructions. Don't follow it:
> http://help.godaddy.com/topic/742/article/5239
>
> Instead, follow this official documentation:
> http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html
>
>
> ******************************* NOTICE *********************************
> This message is intended for the use of the individual or entity to which
> it is addressed and may contain information that is privileged,
> confidential, and exempt from disclosure under applicable law. If the
> reader of this message is not the intended recipient or the employee or
> agent responsible for delivering this message to the intended recipient,
> you are hereby notified that any dissemination, distribution, or copying
> of this communication is strictly prohibited. If you have received this
> communication in error, please notify us immediately by reply or by
> telephone (call us collect at 512-343-9100) and immediately delete this
> message and all its attachments.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
RE: ssl
Posted by Jeffrey Janner <Je...@PolyDyne.com>.
Unfortunately, the ssl-howto.html does not cover the use of the SSLCertificateChainFile connector directive, which he will need to add if using the native APR library, since GoDaddy is a secondary CA. In fact, it doesn't mention anything about intermediate certificate chains for either JAVA or APR.
There was a good Tomcat 5.5 doc on the APR (forgot the link) that covered how to use the SSLCertificateChainFile directive.
-----Original Message-----
From: Christopher Schultz [mailto:chris@christopherschultz.net]
Sent: Wednesday, December 02, 2009 8:53 AM
To: Tomcat Users List
Subject: Re: ssl
Unfortunately, this document is full of confusion and incorrect
instructions. Don't follow it:
http://help.godaddy.com/topic/742/article/5239
Instead, follow this official documentation:
http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html
******************************* NOTICE *********************************
This message is intended for the use of the individual or entity to which
it is addressed and may contain information that is privileged,
confidential, and exempt from disclosure under applicable law. If the
reader of this message is not the intended recipient or the employee or
agent responsible for delivering this message to the intended recipient,
you are hereby notified that any dissemination, distribution, or copying
of this communication is strictly prohibited. If you have received this
communication in error, please notify us immediately by reply or by
telephone (call us collect at 512-343-9100) and immediately delete this
message and all its attachments.
Re: ssl
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Ashok,
On 12/1/2009 7:07 PM, Ashok Kumar wrote:
> We are using tomcat 6.0.20. We installed the self signed certificate,
> its working fine.
Great!
> Now we installed the CA (goDaddy) certificate in order to use CA
> certificate and updated the server.xml and restarted the tomcat
> server.
It would be a great idea to post the relevant portions of your
server.xml file. Specifically, your <Connector> configuration. Also,
please tell us if you're using the native APR library or the standard
Java connector.
> I mean can you point me what other places of tomcat server, I need to
> look so that it can pick the goDaddy certificates.
Unfortunately, this document is full of confusion and incorrect
instructions. Don't follow it:
http://help.godaddy.com/topic/742/article/5239
Instead, follow this official documentation:
http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html
Read everything, even if you think you already understand it.
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAksWf0wACgkQ9CaO5/Lv0PDr0QCgjcZwsm3OeVs1gCdTjaRq6e3Q
7hUAnjaa3oSvrnjd/+RnYTUl8qM0WhZX
=3jDZ
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: ssl
Posted by Nilesh Patil <ni...@gmail.com>.
Dear Ashok,
It Should work,
backup your server.xml and remove it... then start tomcat .. it
shouldn't start..
then again configure it with new Godaddy Certificate..
This is the only way to configure it.
I hope You had followed all other steps related to Tomcat keytool,
Regards,
Nilesh P.
On Wed, Dec 2, 2009 at 5:37 AM, Ashok Kumar <as...@gmail.com> wrote:
> Hi,
>
> We are using tomcat 6.0.20. We installed the self signed certificate, its
> working fine.
>
> Now we installed the CA (goDaddy) certificate in order to use CA
> certificate
> and updated the server.xml and restarted the tomcat server. But tomcat ssl
> port is still picking the old self-signed certs. Do you have any idea why
> it
> is not picking the godaddy certificates? I mean can you point me what
> other
> places of tomcat server, I need to look so that it can pick the goDaddy
> certificates.
>
> Thanks
>
> Ashok
>