You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Miguel Ortiz <mi...@macneillgroup.com> on 2009/09/28 14:32:11 UTC
Apache/Tomcat with SSL
I recently setup a SSL cert on our Apache/Tomcat server. When I load our page, I can see the "lock" in my browser with all the SSL info, but the page only loads as a the jsp script and not the full page. Is there some configuration setting that I have missed. I can provide snippets from the server.xml, httpd.conf, and ssl.conf. Thanks in advance.
Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.ortiz@macneillgroup.com
This email and any files transmitted with it are the confidential property of Focus Holdings, LLC and its subsidiaries, and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
Re: Apache/Tomcat with SSL
Posted by Bill Barker <bi...@verizon.net>.
The most common cause of this is that you haven't copied your JkMount etc
configuration statements to the SSL VirtualHost. In this case, mod_jk
doesn't think that it should be serving the .jsp file, so Apache (httpd)
serves it instead. Since httpd knows nothing about JSP, it just serves it
as a text file.
As other people have pointed out, unless you really know what you are doing,
it is generally a bad idea to share the httpd DocumentRoot with the Tomcat
webapps directory. And even if you do really know what you are doing, it is
a significant amount of extra work to secure this configuration.
"Miguel Ortiz" <mi...@macneillgroup.com> wrote in message
news:BB7EF21E0428A445B16E49E81492642604847D@MACG-EXCH02.macneillgroup.local...
I recently setup a SSL cert on our Apache/Tomcat server. When I load our
page, I can see the "lock" in my browser with all the SSL info, but the page
only loads as a the jsp script and not the full page. Is there some
configuration setting that I have missed. I can provide snippets from the
server.xml, httpd.conf, and ssl.conf. Thanks in advance.
Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.ortiz@macneillgroup.com
This email and any files transmitted with it are the confidential property
of Focus Holdings, LLC and its subsidiaries, and intended solely for the use
of the individual or entity to whom they are addressed. If you are not the
named addressee you should not disseminate, distribute or copy this e-mail.
Please notify the sender immediately by e-mail if you have received this
e-mail by mistake and delete this e-mail from your system. If you are not
the intended recipient you are notified that disclosing, copying,
distributing or taking any action in reliance on the contents of this
information is strictly prohibited.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Apache/Tomcat with SSL
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Pid,
On 9/29/2009 4:12 AM, Pid wrote:
> @Miguel, the problem (from the URLs you supplied) is that Tomcat is not
> processing the JSP content, HTTPD is serving it as a static file.
>
> This is caused by a broken mod_jk*, (or mod_proxy) config
+1
My guess is that, when you set up SSL (which requires a separate
VirtualHost from the pre-existing one), you didn't copy the Jk* (if
mod_jk is in use) or Proxy* (if mod_proxy_ajp|http is in use) directives.
Check your (presumably) working HTTP configuration for directives such
as these and simply copy them into the new SSL-enabled VirtualHost.
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkrCIhUACgkQ9CaO5/Lv0PCq2QCZAUZYLciHpWmp4ELcwYGeHdtR
rPsAn3VUeNLOIa8NfFzZ/fc8a4kSIFFR
=Hbu3
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Apache/Tomcat with SSL
Posted by Pid <pi...@pidster.com>.
On 29/09/2009 03:17, Crypto Sal wrote:
> Miguel,
>
> Do you have Tomcat serving up Port 80 traffic or is that Apache's httpd?
> I suggest you have one web server handle both normal web traffic and SSL
> traffic (if possible), since this page is a login page, you might want
> to FORCE https on that page and not allow HTTP.
> It would almost appear that you have Tomcat serving up port 80 traffic
> and Apache serving up SSL/TLS connections.
This is a confusing thing to say...
> So if that were the case, use Tomcat to do the SSL as well and configure
> tomcat accordingly in the server.xml file.
Don't do that. There's no point in using HTTPD in front of Tomcat if
it's not doing any work.
> Do keep in mind there is a difference between Tomcat and Apache (httpd).
> Please clarify your setup for us.
@Miguel, the problem (from the URLs you supplied) is that Tomcat is not
processing the JSP content, HTTPD is serving it as a static file.
This is caused by a broken mod_jk*, (or mod_proxy config), AND the HTTPD
DocumentRoot being set to the same location as the Tomcat application
directory - which is both bad practice and a fairly serious security
problem.
(I've sent you a separate email demonstrating why this is so bad.)
You should not use the same directory to serve files from different
servers. Here's an example of how you could set it up:
For HTTPD:
/sites/fun.macneillgroup.com/httpdocs
/sites/fun.macneillgroup.com/httpdocs/images
/sites/fun.macneillgroup.com/httpdocs/styles
/sites/fun.macneillgroup.com/httpdocs/scripts
For Tomcat:
/sites/fun.macneillgroup.com/webapps
/sites/fun.macneillgroup.com/webapps/ROOT
/sites/fun.macneillgroup.com/webapps/focus
When you do this, the HTTPD SSL instance will stop serving the JSPs as
static files; it may stop serving them completely.
Then you will need help with your mod_jk set up. You'll need to set
that up for the :80 host and the :443 SSL host. Typically, when I do
this I use an include, so all of the config is in one file.
p
* Which are you using, mod_jk or mod_proxy? I've assumed mod_jk so far.
> On 09/28/2009 01:47 PM, Miguel Ortiz wrote:
>> Jorge,
>>
>> I have setup the SSL through Apache and Tomcat, if there is a
>> different procedure for mod_ssl, I will try that as well. The site
>> comes up fine when I access it without the https, however when I use
>> the https, all I see is the jsp script.
>>
>> Miguel Ortiz
>> Network Engineer
>> x4818
>> wk: 954-331-4818
>> bbry: 954-649-1863
>> miguel.ortiz@macneillgroup.com
>>
>>
>> -----Original Message-----
>> From: Jorge Medina [mailto:jmedina@e-dialog.com]
>> Sent: Monday, September 28, 2009 10:55 AM
>> To: Tomcat Users List
>> Subject: RE: Apache/Tomcat with SSL
>>
>>
>> Also, in order to configure Apache with SSL you must have the module
>> mod_ssl
>>
>>
>> -----Original Message-----
>> From: Jorge Medina [mailto:jmedina@e-dialog.com]
>> Sent: Monday, September 28, 2009 10:40 AM
>> To: Tomcat Users List
>> Subject: RE: Apache/Tomcat with SSL
>>
>> Hola Miguel,
>>
>> did you set up SSL in Apache ? Or did you do it in Tomcat ? Or in both ?
>>
>> I am assuming that you want Apache to be the exposed server, therefore
>> SSL must be configured in Apache. You must also have configured Apache
>> to forward the requests to Tomcat by using the Apache modules mod_jk
>> or mod_proxy
>>
>> -Jorge
>>
>>
>>
>> -----Original Message-----
>> From: Miguel Ortiz [mailto:miguel.ortiz@macneillgroup.com]
>> Sent: Monday, September 28, 2009 8:32 AM
>> To: users@tomcat.apache.org
>> Subject: Apache/Tomcat with SSL
>>
>> I recently setup a SSL cert on our Apache/Tomcat server. When I load
>> our page, I can see the "lock" in my browser with all the SSL info,
>> but the page only loads as a the jsp script and not the full page. Is
>> there some configuration setting that I have missed. I can provide
>> snippets from the server.xml, httpd.conf, and ssl.conf. Thanks in
>> advance.
>>
>> Miguel Ortiz
>> Network Engineer
>> x4818
>> wk: 954-331-4818
>> bbry: 954-649-1863
>> miguel.ortiz@macneillgroup.com
>>
>>
>>
>>
>> This email and any files transmitted with it are the confidential
>> property of Focus Holdings, LLC and its subsidiaries, and intended
>> solely for the use of the individual or entity to whom they are
>> addressed. If you are not the named addressee you should not
>> disseminate, distribute or copy this e-mail. Please notify the sender
>> immediately by e-mail if you have received this e-mail by mistake and
>> delete this e-mail from your system. If you are not the intended
>> recipient you are notified that disclosing, copying, distributing or
>> taking any action in reliance on the contents of this information is
>> strictly prohibited.
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
>> No virus found in this incoming message.
>> Checked by AVG - www.avg.com
>> Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date:
>> 09/28/09 05:51:00
>>
>>
>>
>> This email and any files transmitted with it are the confidential
>> property of Focus Holdings, LLC and its subsidiaries, and intended
>> solely for the use of the individual or entity to whom they are
>> addressed. If you are not the named addressee you should not
>> disseminate, distribute or copy this e-mail. Please notify the sender
>> immediately by e-mail if you have received this e-mail by mistake and
>> delete this e-mail from your system. If you are not the intended
>> recipient you are notified that disclosing, copying, distributing or
>> taking any action in reliance on the contents of this information is
>> strictly prohibited.
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Apache/Tomcat with SSL
Posted by Crypto Sal <cr...@gmail.com>.
Miguel,
Do you have Tomcat serving up Port 80 traffic or is that Apache's httpd?
I suggest you have one web server handle both normal web traffic and SSL
traffic (if possible), since this page is a login page, you might want
to FORCE https on that page and not allow HTTP. It would almost appear
that you have Tomcat serving up port 80 traffic and Apache serving up
SSL/TLS connections. So if that were the case, use Tomcat to do the SSL
as well and configure tomcat accordingly in the server.xml file.
Do keep in mind there is a difference between Tomcat and Apache (httpd).
Please clarify your setup for us.
On 09/28/2009 01:47 PM, Miguel Ortiz wrote:
> Jorge,
>
> I have setup the SSL through Apache and Tomcat, if there is a different procedure for mod_ssl, I will try that as well. The site comes up fine when I access it without the https, however when I use the https, all I see is the jsp script.
>
> Miguel Ortiz
> Network Engineer
> x4818
> wk: 954-331-4818
> bbry: 954-649-1863
> miguel.ortiz@macneillgroup.com
>
>
> -----Original Message-----
> From: Jorge Medina [mailto:jmedina@e-dialog.com]
> Sent: Monday, September 28, 2009 10:55 AM
> To: Tomcat Users List
> Subject: RE: Apache/Tomcat with SSL
>
>
> Also, in order to configure Apache with SSL you must have the module mod_ssl
>
>
> -----Original Message-----
> From: Jorge Medina [mailto:jmedina@e-dialog.com]
> Sent: Monday, September 28, 2009 10:40 AM
> To: Tomcat Users List
> Subject: RE: Apache/Tomcat with SSL
>
> Hola Miguel,
>
> did you set up SSL in Apache ? Or did you do it in Tomcat ? Or in both ?
>
> I am assuming that you want Apache to be the exposed server, therefore SSL must be configured in Apache. You must also have configured Apache to forward the requests to Tomcat by using the Apache modules mod_jk or mod_proxy
>
> -Jorge
>
>
>
> -----Original Message-----
> From: Miguel Ortiz [mailto:miguel.ortiz@macneillgroup.com]
> Sent: Monday, September 28, 2009 8:32 AM
> To: users@tomcat.apache.org
> Subject: Apache/Tomcat with SSL
>
> I recently setup a SSL cert on our Apache/Tomcat server. When I load our page, I can see the "lock" in my browser with all the SSL info, but the page only loads as a the jsp script and not the full page. Is there some configuration setting that I have missed. I can provide snippets from the server.xml, httpd.conf, and ssl.conf. Thanks in advance.
>
> Miguel Ortiz
> Network Engineer
> x4818
> wk: 954-331-4818
> bbry: 954-649-1863
> miguel.ortiz@macneillgroup.com
>
>
>
>
> This email and any files transmitted with it are the confidential property of Focus Holdings, LLC and its subsidiaries, and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
> No virus found in this incoming message.
> Checked by AVG - www.avg.com
> Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date: 09/28/09 05:51:00
>
>
>
> This email and any files transmitted with it are the confidential property of Focus Holdings, LLC and its subsidiaries, and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
RE: Apache/Tomcat with SSL
Posted by Miguel Ortiz <mi...@macneillgroup.com>.
Jorge,
I have setup the SSL through Apache and Tomcat, if there is a different procedure for mod_ssl, I will try that as well. The site comes up fine when I access it without the https, however when I use the https, all I see is the jsp script.
Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.ortiz@macneillgroup.com
-----Original Message-----
From: Jorge Medina [mailto:jmedina@e-dialog.com]
Sent: Monday, September 28, 2009 10:55 AM
To: Tomcat Users List
Subject: RE: Apache/Tomcat with SSL
Also, in order to configure Apache with SSL you must have the module mod_ssl
-----Original Message-----
From: Jorge Medina [mailto:jmedina@e-dialog.com]
Sent: Monday, September 28, 2009 10:40 AM
To: Tomcat Users List
Subject: RE: Apache/Tomcat with SSL
Hola Miguel,
did you set up SSL in Apache ? Or did you do it in Tomcat ? Or in both ?
I am assuming that you want Apache to be the exposed server, therefore SSL must be configured in Apache. You must also have configured Apache to forward the requests to Tomcat by using the Apache modules mod_jk or mod_proxy
-Jorge
-----Original Message-----
From: Miguel Ortiz [mailto:miguel.ortiz@macneillgroup.com]
Sent: Monday, September 28, 2009 8:32 AM
To: users@tomcat.apache.org
Subject: Apache/Tomcat with SSL
I recently setup a SSL cert on our Apache/Tomcat server. When I load our page, I can see the "lock" in my browser with all the SSL info, but the page only loads as a the jsp script and not the full page. Is there some configuration setting that I have missed. I can provide snippets from the server.xml, httpd.conf, and ssl.conf. Thanks in advance.
Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.ortiz@macneillgroup.com
This email and any files transmitted with it are the confidential property of Focus Holdings, LLC and its subsidiaries, and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
No virus found in this incoming message.
Checked by AVG - www.avg.com
Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date: 09/28/09 05:51:00
This email and any files transmitted with it are the confidential property of Focus Holdings, LLC and its subsidiaries, and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
RE: Apache/Tomcat with SSL
Posted by Jorge Medina <jm...@e-dialog.com>.
Also, in order to configure Apache with SSL you must have the module mod_ssl
-----Original Message-----
From: Jorge Medina [mailto:jmedina@e-dialog.com]
Sent: Monday, September 28, 2009 10:40 AM
To: Tomcat Users List
Subject: RE: Apache/Tomcat with SSL
Hola Miguel,
did you set up SSL in Apache ? Or did you do it in Tomcat ? Or in both ?
I am assuming that you want Apache to be the exposed server, therefore SSL must be configured in Apache. You must also have configured Apache to forward the requests to Tomcat by using the Apache modules mod_jk or mod_proxy
-Jorge
-----Original Message-----
From: Miguel Ortiz [mailto:miguel.ortiz@macneillgroup.com]
Sent: Monday, September 28, 2009 8:32 AM
To: users@tomcat.apache.org
Subject: Apache/Tomcat with SSL
I recently setup a SSL cert on our Apache/Tomcat server. When I load our page, I can see the "lock" in my browser with all the SSL info, but the page only loads as a the jsp script and not the full page. Is there some configuration setting that I have missed. I can provide snippets from the server.xml, httpd.conf, and ssl.conf. Thanks in advance.
Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.ortiz@macneillgroup.com
This email and any files transmitted with it are the confidential property of Focus Holdings, LLC and its subsidiaries, and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
RE: Apache/Tomcat with SSL
Posted by Jorge Medina <jm...@e-dialog.com>.
Hola Miguel,
did you set up SSL in Apache ? Or did you do it in Tomcat ? Or in both ?
I am assuming that you want Apache to be the exposed server, therefore SSL must be configured in Apache. You must also have configured Apache to forward the requests to Tomcat by using the Apache modules mod_jk or mod_proxy
-Jorge
-----Original Message-----
From: Miguel Ortiz [mailto:miguel.ortiz@macneillgroup.com]
Sent: Monday, September 28, 2009 8:32 AM
To: users@tomcat.apache.org
Subject: Apache/Tomcat with SSL
I recently setup a SSL cert on our Apache/Tomcat server. When I load our page, I can see the "lock" in my browser with all the SSL info, but the page only loads as a the jsp script and not the full page. Is there some configuration setting that I have missed. I can provide snippets from the server.xml, httpd.conf, and ssl.conf. Thanks in advance.
Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.ortiz@macneillgroup.com
This email and any files transmitted with it are the confidential property of Focus Holdings, LLC and its subsidiaries, and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Apache/Tomcat with SSL
Posted by Pid <pi...@pidster.com>.
Pid,
> Thanks for the response, I have contacted the developers of our web
site to separate the documentRoot directories. Also, I have tested the
SSL with httpd turned off, and I don't seem to have the same luck. I
received the following error: Error code: ssl_error_rx_record_too_long.
I believe this was because Apache did not find the ssl.conf setting to
enable SSL (I commented it out for testing).
> Once I re-enabled it the error went away, but I was wondering if this
could mean that some configuration setting is missing or incorrect with
Tomcat. I have researched the error, but haven't found anything that may
help. Here is the snippet from server.xml that specifies the SSL settings:
<!-- Define a SSL HTTP/1.1 Connector on port 8443
-->
<Connector port="443" maxHttpHeaderSize="8192" maxThreads="150"
minSpareThreads="25" maxSpareThreads="75" enableLookups="false"
disableUploadTimeout="true" acceptCount="100" scheme="https"
secure="true" clientAuth="false" sslProtocol="TLS"
keystoreFile="/usr/local/ssl/private/fun.macneillgroup.com.keystore"
keypass="nottherealkeypass"
truststoreFile="/usr/local/ssl/cert/fun.macneillgroup.com.crt"
truststorePass="nottherealkeypass" />
>Also, you mentioned a bad mod_jk. The httpd.conf calls mod_proxy,
which currently doesn't have any specific settings. I tried to
manipulate the entry to point to our site:443 but the page didn't display.
>Sorry for explosion of thoughts. I want to make know (if my rambling
hasn't already), I am very new to Apache/Tomcat. Is there a resource
that I can use to identify "good practices" to manage this web server.
Please note that this server was setup by a consulting company which
created the page, I have been recently tasked to manage it and configure
the SSL. Thanks again.
Either Apache HTTPD handles the SSL, or Tomcat does.
You've got a Tomcat connector set up for port 443, if you also have a
port 443 set up in your HTTPD you have a problem right there.
If you want to use Apache HTTPD, then I'd advise that you configure it
to handle the SSL as well - comment out the Tomcat SSL Connector in
server.xml.
You state that you're using mod_proxy; is there also a LoadModule for
mod_proxy_ajp or mod_proxy_http?
What other Connectors are defined in server.xml?
p
On 28/09/2009 22:12, Jorge Medina wrote:
> As suggested by André, you may want to join the Apache User's list and ask there your question.
>
> You need to configure SSL in your Apache web server.
> To configure SSL Apache Web server, the first thing you need to do is to verify that the module mod_ssl is available.
> You may want to consider posting sections of your httpd.conf file (or any relevant file included by the "Include" directive) (Remove any sensitive information when posting your question)
>
> -Jorge
>
>
>
> -----Original Message-----
> From: Miguel Ortiz [mailto:miguel.ortiz@macneillgroup.com]
> Sent: Monday, September 28, 2009 3:19 PM
> To: 'Tomcat Users List'; 'Tomcat Users List'
> Subject: RE: Apache/Tomcat with SSL
>
> André,
>
> That is what I did and it still came up with server not found. If you would like to verify. Our site is http://fun.macneillgroup.com. The site we are currently testing is http://fun.macneillgroup.com/focus/common/Index.jsp. This page works, however the https form doesn't seem to produce the desired results.
>
> Miguel Ortiz
> Network Engineer
> x4818
> wk: 954-331-4818
> bbry: 954-649-1863
> miguel.ortiz@macneillgroup.com
>
>
> -----Original Message-----
> From: André Warnier [mailto:aw@ice-sa.com]
> Sent: Monday, September 28, 2009 3:02 PM
> To: Tomcat Users List
> Subject: Re: Apache/Tomcat with SSL
>
> Miguel Ortiz wrote:
>> André,
>>
>> This server was configured by our web development contractors. I was only tasked with setting up the SSL. When I go to the specified URL, firefox throws a server not found.
>>
>
> When I mentioned the URL
> http://your-hostname/ROOT/WEB-INF/web.xml
> I meant for you to replace the "your-hostname" part by your own host's name.
> :-)
>
> Also, basically I think that this discussion belongs more to the Apache user's list, than Tomcat's, because it seems that the SSL part is done at the Apache httpd level, not at Tomcat's level.
> It is also not easy to just add SSL to an Apache httpd, if this Apache httpd uses VirtualHosts.
>
> In the first responses to your first post, some very relevant questions were asked, which I don't think you have answered fully yet. It is difficult for someone to help you with the partial information you have supplied so far. Tell us :
> - on which platform (OS) this is running
> - how Apache httpd and Tomcat are connected together (using mod_jk, mod_proxy_ajp, or mod_proxy_http?)
> - is (was) your Apache httpd configured with multiple<VirtualHost> sections ?
> - can you append your main Apache httpd configuration file (httpd.conf or apache2.conf, depending on platform). Don't put it as an attachment, because chances are this list will strip it. Paste it right into your message.
> - what exactly did you add, and where, to add the SSL capability ?
>
>
>
>
>
>
>
>>
>> Miguel Ortiz
>> Network Engineer
>> x4818
>> wk: 954-331-4818
>> bbry: 954-649-1863
>> miguel.ortiz@macneillgroup.com
>>
>>
>> -----Original Message-----
>> From: André Warnier [mailto:aw@ice-sa.com]
>> Sent: Monday, September 28, 2009 11:25 AM
>> To: Tomcat Users List
>> Subject: Re: Apache/Tomcat with SSL
>>
>> Miguel Ortiz wrote:
>> ...
>>> [user@localhost conf.d]# tail -f /var/log/httpd/ssl_error_log [Mon
>>> Sep 28 08:51:41 2009] [error] [client xxx.xxx.xxx.xxx] File does not
>>> exist: /var/lib/tomcat5/webapps/favicon.ico
>>> [Mon Sep 28 08:51:44 2009] [error] [client xxx.xxx.xxx.xxx] File does
>>> not exist: /var/lib/tomcat5/webapps/favicon.ico
>>> [Mon Sep 28 09:03:04 2009] [error] [client xxx.xxx.xxx.xxx] Directory
>>> index forbidden by Options directive: /var/lib/tomcat5/webapps/
>>
>> Nothing to, I think, with your problem, but it would seem from the
>> above that you have configured your Apache front-end with something
>> like
>>
>> DocumentRoot /var/lib/tomcat5/webapps
>>
>> which, in principle, is not a good idea.
>> What do you get in your browser when you request
>> http://your-hostname/ROOT/WEB-INF/web.xml
>>
>> (or with https:// as the case may be)
>> ?
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
>> No virus found in this incoming message.
>> Checked by AVG - www.avg.com
>> Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date:
>> 09/28/09 05:51:00
>>
>>
>>
>> This email and any files transmitted with it are the confidential property of Focus Holdings, LLC and its subsidiaries, and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
> No virus found in this incoming message.
> Checked by AVG - www.avg.com
> Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date: 09/28/09 05:51:00
>
>
>
> This email and any files transmitted with it are the confidential property of Focus Holdings, LLC and its subsidiaries, and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
RE: Apache/Tomcat with SSL
Posted by Jorge Medina <jm...@e-dialog.com>.
As suggested by André, you may want to join the Apache User's list and ask there your question.
You need to configure SSL in your Apache web server.
To configure SSL Apache Web server, the first thing you need to do is to verify that the module mod_ssl is available.
You may want to consider posting sections of your httpd.conf file (or any relevant file included by the "Include" directive) (Remove any sensitive information when posting your question)
-Jorge
-----Original Message-----
From: Miguel Ortiz [mailto:miguel.ortiz@macneillgroup.com]
Sent: Monday, September 28, 2009 3:19 PM
To: 'Tomcat Users List'; 'Tomcat Users List'
Subject: RE: Apache/Tomcat with SSL
André,
That is what I did and it still came up with server not found. If you would like to verify. Our site is http://fun.macneillgroup.com. The site we are currently testing is http://fun.macneillgroup.com/focus/common/Index.jsp. This page works, however the https form doesn't seem to produce the desired results.
Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.ortiz@macneillgroup.com
-----Original Message-----
From: André Warnier [mailto:aw@ice-sa.com]
Sent: Monday, September 28, 2009 3:02 PM
To: Tomcat Users List
Subject: Re: Apache/Tomcat with SSL
Miguel Ortiz wrote:
> André,
>
> This server was configured by our web development contractors. I was only tasked with setting up the SSL. When I go to the specified URL, firefox throws a server not found.
>
When I mentioned the URL
http://your-hostname/ROOT/WEB-INF/web.xml
I meant for you to replace the "your-hostname" part by your own host's name.
:-)
Also, basically I think that this discussion belongs more to the Apache user's list, than Tomcat's, because it seems that the SSL part is done at the Apache httpd level, not at Tomcat's level.
It is also not easy to just add SSL to an Apache httpd, if this Apache httpd uses VirtualHosts.
In the first responses to your first post, some very relevant questions were asked, which I don't think you have answered fully yet. It is difficult for someone to help you with the partial information you have supplied so far. Tell us :
- on which platform (OS) this is running
- how Apache httpd and Tomcat are connected together (using mod_jk, mod_proxy_ajp, or mod_proxy_http?)
- is (was) your Apache httpd configured with multiple <VirtualHost> sections ?
- can you append your main Apache httpd configuration file (httpd.conf or apache2.conf, depending on platform). Don't put it as an attachment, because chances are this list will strip it. Paste it right into your message.
- what exactly did you add, and where, to add the SSL capability ?
>
> Miguel Ortiz
> Network Engineer
> x4818
> wk: 954-331-4818
> bbry: 954-649-1863
> miguel.ortiz@macneillgroup.com
>
>
> -----Original Message-----
> From: André Warnier [mailto:aw@ice-sa.com]
> Sent: Monday, September 28, 2009 11:25 AM
> To: Tomcat Users List
> Subject: Re: Apache/Tomcat with SSL
>
> Miguel Ortiz wrote:
> ...
>> [user@localhost conf.d]# tail -f /var/log/httpd/ssl_error_log [Mon
>> Sep 28 08:51:41 2009] [error] [client xxx.xxx.xxx.xxx] File does not
>> exist: /var/lib/tomcat5/webapps/favicon.ico
>> [Mon Sep 28 08:51:44 2009] [error] [client xxx.xxx.xxx.xxx] File does
>> not exist: /var/lib/tomcat5/webapps/favicon.ico
>> [Mon Sep 28 09:03:04 2009] [error] [client xxx.xxx.xxx.xxx] Directory
>> index forbidden by Options directive: /var/lib/tomcat5/webapps/
>
> Nothing to, I think, with your problem, but it would seem from the
> above that you have configured your Apache front-end with something
> like
>
> DocumentRoot /var/lib/tomcat5/webapps
>
> which, in principle, is not a good idea.
> What do you get in your browser when you request
> http://your-hostname/ROOT/WEB-INF/web.xml
>
> (or with https:// as the case may be)
> ?
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
> No virus found in this incoming message.
> Checked by AVG - www.avg.com
> Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date:
> 09/28/09 05:51:00
>
>
>
> This email and any files transmitted with it are the confidential property of Focus Holdings, LLC and its subsidiaries, and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
No virus found in this incoming message.
Checked by AVG - www.avg.com
Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date: 09/28/09 05:51:00
This email and any files transmitted with it are the confidential property of Focus Holdings, LLC and its subsidiaries, and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
RE: Apache/Tomcat with SSL
Posted by Miguel Ortiz <mi...@macneillgroup.com>.
André,
That is what I did and it still came up with server not found. If you would like to verify. Our site is http://fun.macneillgroup.com. The site we are currently testing is http://fun.macneillgroup.com/focus/common/Index.jsp. This page works, however the https form doesn't seem to produce the desired results.
Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.ortiz@macneillgroup.com
-----Original Message-----
From: André Warnier [mailto:aw@ice-sa.com]
Sent: Monday, September 28, 2009 3:02 PM
To: Tomcat Users List
Subject: Re: Apache/Tomcat with SSL
Miguel Ortiz wrote:
> André,
>
> This server was configured by our web development contractors. I was only tasked with setting up the SSL. When I go to the specified URL, firefox throws a server not found.
>
When I mentioned the URL
http://your-hostname/ROOT/WEB-INF/web.xml
I meant for you to replace the "your-hostname" part by your own host's name.
:-)
Also, basically I think that this discussion belongs more to the Apache
user's list, than Tomcat's, because it seems that the SSL part is done
at the Apache httpd level, not at Tomcat's level.
It is also not easy to just add SSL to an Apache httpd, if this Apache
httpd uses VirtualHosts.
In the first responses to your first post, some very relevant questions
were asked, which I don't think you have answered fully yet. It is
difficult for someone to help you with the partial information you have
supplied so far. Tell us :
- on which platform (OS) this is running
- how Apache httpd and Tomcat are connected together (using mod_jk,
mod_proxy_ajp, or mod_proxy_http?)
- is (was) your Apache httpd configured with multiple <VirtualHost>
sections ?
- can you append your main Apache httpd configuration file (httpd.conf
or apache2.conf, depending on platform). Don't put it as an attachment,
because chances are this list will strip it. Paste it right into your
message.
- what exactly did you add, and where, to add the SSL capability ?
>
> Miguel Ortiz
> Network Engineer
> x4818
> wk: 954-331-4818
> bbry: 954-649-1863
> miguel.ortiz@macneillgroup.com
>
>
> -----Original Message-----
> From: André Warnier [mailto:aw@ice-sa.com]
> Sent: Monday, September 28, 2009 11:25 AM
> To: Tomcat Users List
> Subject: Re: Apache/Tomcat with SSL
>
> Miguel Ortiz wrote:
> ...
>> [user@localhost conf.d]# tail -f /var/log/httpd/ssl_error_log
>> [Mon Sep 28 08:51:41 2009] [error] [client xxx.xxx.xxx.xxx] File does not exist: /var/lib/tomcat5/webapps/favicon.ico
>> [Mon Sep 28 08:51:44 2009] [error] [client xxx.xxx.xxx.xxx] File does not exist: /var/lib/tomcat5/webapps/favicon.ico
>> [Mon Sep 28 09:03:04 2009] [error] [client xxx.xxx.xxx.xxx] Directory index forbidden by Options directive: /var/lib/tomcat5/webapps/
>
> Nothing to, I think, with your problem, but it would seem from the above
> that you have configured your Apache front-end with something like
>
> DocumentRoot /var/lib/tomcat5/webapps
>
> which, in principle, is not a good idea.
> What do you get in your browser when you request
> http://your-hostname/ROOT/WEB-INF/web.xml
>
> (or with https:// as the case may be)
> ?
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
> No virus found in this incoming message.
> Checked by AVG - www.avg.com
> Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date: 09/28/09 05:51:00
>
>
>
> This email and any files transmitted with it are the confidential property of Focus Holdings, LLC and its subsidiaries, and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
No virus found in this incoming message.
Checked by AVG - www.avg.com
Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date: 09/28/09 05:51:00
This email and any files transmitted with it are the confidential property of Focus Holdings, LLC and its subsidiaries, and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Apache/Tomcat with SSL
Posted by André Warnier <aw...@ice-sa.com>.
Miguel Ortiz wrote:
> André,
>
> This server was configured by our web development contractors. I was only tasked with setting up the SSL. When I go to the specified URL, firefox throws a server not found.
>
When I mentioned the URL
http://your-hostname/ROOT/WEB-INF/web.xml
I meant for you to replace the "your-hostname" part by your own host's name.
:-)
Also, basically I think that this discussion belongs more to the Apache
user's list, than Tomcat's, because it seems that the SSL part is done
at the Apache httpd level, not at Tomcat's level.
It is also not easy to just add SSL to an Apache httpd, if this Apache
httpd uses VirtualHosts.
In the first responses to your first post, some very relevant questions
were asked, which I don't think you have answered fully yet. It is
difficult for someone to help you with the partial information you have
supplied so far. Tell us :
- on which platform (OS) this is running
- how Apache httpd and Tomcat are connected together (using mod_jk,
mod_proxy_ajp, or mod_proxy_http?)
- is (was) your Apache httpd configured with multiple <VirtualHost>
sections ?
- can you append your main Apache httpd configuration file (httpd.conf
or apache2.conf, depending on platform). Don't put it as an attachment,
because chances are this list will strip it. Paste it right into your
message.
- what exactly did you add, and where, to add the SSL capability ?
>
> Miguel Ortiz
> Network Engineer
> x4818
> wk: 954-331-4818
> bbry: 954-649-1863
> miguel.ortiz@macneillgroup.com
>
>
> -----Original Message-----
> From: André Warnier [mailto:aw@ice-sa.com]
> Sent: Monday, September 28, 2009 11:25 AM
> To: Tomcat Users List
> Subject: Re: Apache/Tomcat with SSL
>
> Miguel Ortiz wrote:
> ...
>> [user@localhost conf.d]# tail -f /var/log/httpd/ssl_error_log
>> [Mon Sep 28 08:51:41 2009] [error] [client xxx.xxx.xxx.xxx] File does not exist: /var/lib/tomcat5/webapps/favicon.ico
>> [Mon Sep 28 08:51:44 2009] [error] [client xxx.xxx.xxx.xxx] File does not exist: /var/lib/tomcat5/webapps/favicon.ico
>> [Mon Sep 28 09:03:04 2009] [error] [client xxx.xxx.xxx.xxx] Directory index forbidden by Options directive: /var/lib/tomcat5/webapps/
>
> Nothing to, I think, with your problem, but it would seem from the above
> that you have configured your Apache front-end with something like
>
> DocumentRoot /var/lib/tomcat5/webapps
>
> which, in principle, is not a good idea.
> What do you get in your browser when you request
> http://your-hostname/ROOT/WEB-INF/web.xml
>
> (or with https:// as the case may be)
> ?
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
> No virus found in this incoming message.
> Checked by AVG - www.avg.com
> Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date: 09/28/09 05:51:00
>
>
>
> This email and any files transmitted with it are the confidential property of Focus Holdings, LLC and its subsidiaries, and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
RE: Apache/Tomcat with SSL
Posted by Miguel Ortiz <mi...@macneillgroup.com>.
André,
This server was configured by our web development contractors. I was only tasked with setting up the SSL. When I go to the specified URL, firefox throws a server not found.
Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.ortiz@macneillgroup.com
-----Original Message-----
From: André Warnier [mailto:aw@ice-sa.com]
Sent: Monday, September 28, 2009 11:25 AM
To: Tomcat Users List
Subject: Re: Apache/Tomcat with SSL
Miguel Ortiz wrote:
...
> [user@localhost conf.d]# tail -f /var/log/httpd/ssl_error_log
> [Mon Sep 28 08:51:41 2009] [error] [client xxx.xxx.xxx.xxx] File does not exist: /var/lib/tomcat5/webapps/favicon.ico
> [Mon Sep 28 08:51:44 2009] [error] [client xxx.xxx.xxx.xxx] File does not exist: /var/lib/tomcat5/webapps/favicon.ico
> [Mon Sep 28 09:03:04 2009] [error] [client xxx.xxx.xxx.xxx] Directory index forbidden by Options directive: /var/lib/tomcat5/webapps/
Nothing to, I think, with your problem, but it would seem from the above
that you have configured your Apache front-end with something like
DocumentRoot /var/lib/tomcat5/webapps
which, in principle, is not a good idea.
What do you get in your browser when you request
http://your-hostname/ROOT/WEB-INF/web.xml
(or with https:// as the case may be)
?
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
No virus found in this incoming message.
Checked by AVG - www.avg.com
Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date: 09/28/09 05:51:00
This email and any files transmitted with it are the confidential property of Focus Holdings, LLC and its subsidiaries, and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Apache/Tomcat with SSL
Posted by André Warnier <aw...@ice-sa.com>.
Miguel Ortiz wrote:
...
> [user@localhost conf.d]# tail -f /var/log/httpd/ssl_error_log
> [Mon Sep 28 08:51:41 2009] [error] [client xxx.xxx.xxx.xxx] File does not exist: /var/lib/tomcat5/webapps/favicon.ico
> [Mon Sep 28 08:51:44 2009] [error] [client xxx.xxx.xxx.xxx] File does not exist: /var/lib/tomcat5/webapps/favicon.ico
> [Mon Sep 28 09:03:04 2009] [error] [client xxx.xxx.xxx.xxx] Directory index forbidden by Options directive: /var/lib/tomcat5/webapps/
Nothing to, I think, with your problem, but it would seem from the above
that you have configured your Apache front-end with something like
DocumentRoot /var/lib/tomcat5/webapps
which, in principle, is not a good idea.
What do you get in your browser when you request
http://your-hostname/ROOT/WEB-INF/web.xml
(or with https:// as the case may be)
?
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
RE: Apache/Tomcat with SSL
Posted by Miguel Ortiz <mi...@macneillgroup.com>.
Peter,
I have checked the httpd logs. I didn't find anything that says why the page isn't loading. Here is a copy of the results for the various log files. I am running Apache/httpd 2.2.3 and Tomcat 5. Also, I have contacted our web developer to check the css and links for the page. Thanks again.
[user@localhost conf.d]# tail -f /var/log/httpd/ssl_error_log
[Mon Sep 28 08:51:41 2009] [error] [client xxx.xxx.xxx.xxx] File does not exist: /var/lib/tomcat5/webapps/favicon.ico
[Mon Sep 28 08:51:44 2009] [error] [client xxx.xxx.xxx.xxx] File does not exist: /var/lib/tomcat5/webapps/favicon.ico
[Mon Sep 28 09:03:04 2009] [error] [client xxx.xxx.xxx.xxx] Directory index forbidden by Options directive: /var/lib/tomcat5/webapps/
[Mon Sep 28 09:17:32 2009] [error] [client xxx.xxx.xxx.xxx] File does not exist: /var/lib/tomcat5/webapps/favicon.ico
[Mon Sep 28 09:17:35 2009] [error] [client xxx.xxx.xxx.xxx] File does not exist: /var/lib/tomcat5/webapps/favicon.ico
[user@localhost conf.d]# tail -f /var/log/httpd/ssl_access_log
xxx.xxx.xxx.xxx - - [28/Sep/2009:08:51:41 -0400] "GET /favicon.ico HTTP/1.1" 404 296
xxx.xxx.xxx.xxx - - [28/Sep/2009:08:51:44 -0400] "GET /favicon.ico HTTP/1.1" 404 296
xxx.xxx.xxx.xxx - - [28/Sep/2009:09:03:04 -0400] "GET / HTTP/1.1" 403 5043
xxx.xxx.xxx.xxx - - [28/Sep/2009:09:03:04 -0400] "GET /icons/apache_pb.gif HTTP/1.1" 200 2326
xxx.xxx.xxx.xxx - - [28/Sep/2009:09:03:04 -0400] "GET /icons/powered_by_rh.png HTTP/1.1" 200 1213
xxx.xxx.xxx.xxx - - [28/Sep/2009:09:17:32 -0400] "GET /focus/common/Index.jsp HTTP/1.1" 200 12414
xxx.xxx.xxx.xxx - - [28/Sep/2009:09:17:32 -0400] "GET /favicon.ico HTTP/1.1" 404 296
xxx.xxx.xxx.xxx - - [28/Sep/2009:09:17:35 -0400] "GET /favicon.ico HTTP/1.1" 404 296
xxx.xxx.xxx.xxx - - [28/Sep/2009:09:49:45 -0400] "GET /focus/common/Index.jsp HTTP/1.1" 200 12414
xxx.xxx.xxx.xxx - - [28/Sep/2009:09:49:45 -0400] "GET /favicon.ico HTTP/1.1" 200 21630
[user@localhost conf.d]# tail -f /var/log/httpd/error_log
[Sun Sep 27 04:02:28 2009] [notice] Digest: generating secret for digest authentication ...
[Sun Sep 27 04:02:28 2009] [notice] Digest: done
[Sun Sep 27 04:02:28 2009] [notice] mod_python: Creating 4 session mutexes based on 150 max processes and 0 max threads.
[Sun Sep 27 04:02:28 2009] [notice] Apache/2.2.3 (CentOS) configured -- resuming normal operations
Miguel Ortiz
Network Engineer
x4818
wk: 954-331-4818
bbry: 954-649-1863
miguel.ortiz@macneillgroup.com
-----Original Message-----
From: peter.crowther3@googlemail.com [mailto:peter.crowther3@googlemail.com] On Behalf Of Peter Crowther
Sent: Monday, September 28, 2009 9:03 AM
To: Tomcat Users List
Subject: Re: Apache/Tomcat with SSL
2009/9/28 Miguel Ortiz <mi...@macneillgroup.com>
> I recently setup a SSL cert on our Apache/Tomcat server. When I load our
> page, I can see the "lock" in my browser with all the SSL info, but the page
> only loads as a the jsp script and not the full page. Is there some
> configuration setting that I have missed. I can provide snippets from the
> server.xml, httpd.conf, and ssl.conf. Thanks in advance.
>
Have you ensured that all the links to other content on your page (CSS,
images etc) are appropriate for SSL access? Are they either relative links
or starting with https://... when accessed over SSL?
What's in the access logs for httpd (I assume from "Apache/Tomcat" that
you're running httpd in front, though you don't say or give any version
information)? What's in the access logs for Tomcat? Do they match, or are
some requests being dropped?
If you use some appropriate logging tool* from your browser to examine
requests, what's happening?
- Peter
* Fiddler2's good for IE, Firebug works for Firefox, no idea for other
browsers!
No virus found in this incoming message.
Checked by AVG - www.avg.com
Version: 8.5.409 / Virus Database: 270.13.112/2390 - Release Date: 09/28/09 05:51:00
This email and any files transmitted with it are the confidential property of Focus Holdings, LLC and its subsidiaries, and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Apache/Tomcat with SSL
Posted by Peter Crowther <pe...@melandra.com>.
2009/9/28 Miguel Ortiz <mi...@macneillgroup.com>
> I recently setup a SSL cert on our Apache/Tomcat server. When I load our
> page, I can see the "lock" in my browser with all the SSL info, but the page
> only loads as a the jsp script and not the full page. Is there some
> configuration setting that I have missed. I can provide snippets from the
> server.xml, httpd.conf, and ssl.conf. Thanks in advance.
>
Have you ensured that all the links to other content on your page (CSS,
images etc) are appropriate for SSL access? Are they either relative links
or starting with https://... when accessed over SSL?
What's in the access logs for httpd (I assume from "Apache/Tomcat" that
you're running httpd in front, though you don't say or give any version
information)? What's in the access logs for Tomcat? Do they match, or are
some requests being dropped?
If you use some appropriate logging tool* from your browser to examine
requests, what's happening?
- Peter
* Fiddler2's good for IE, Firebug works for Firefox, no idea for other
browsers!