You are viewing a plain text version of this content. The canonical link for it is here.
Posted to soap-user@xml.apache.org by Arno Hartmann <a....@teraport.de> on 2001/05/03 13:10:03 UTC

Apache webserver-Tomcat-openssl-Soap

We are using 
the apache webserver and tomcat3.2.1.
The apache webserver is configured with an openssl server certificate. 
tomcat's ssl-section in server.xml is uncomment. 
Now we want to install Soap. 

The soap-samples are working, if we use http.
(http://localhost:8080/soap)
If we use httpS we can't connect to soap. 

The url https://localhost:8443/soap says:
	netscape can't find the server
The Url https://localhost/soap says 
	The requested URL /soap was not found on this server.
The Url https://localhost:8080/soap doesn't answer anything even after 5
minutes.

An other application (without soap) works fine. 
Has anyone experience with this kind of configuration. 

thanks 

Arno


Here are some parts of our configuration files: 
http.conf : 

#
# Port: The port to which the standalone server listens. For
# ports < 1023, you will need httpd to be run as root initially.
#
# Port 80

##
##  SSL Support
##
##  When we also provide SSL we have to listen to the 
##  standard HTTP port (see above) and to the HTTPS port
##
<IfDefine SSL>
Listen 80
Listen 443
</IfDefine>


server.xml (Tomcat)
<!-- ==================== Connectors ==================== -->

        <!-- Normal HTTP -->
        <Connector
className="org.apache.tomcat.service.PoolTcpConnector">
            <Parameter name="handler" 
               
value="org.apache.tomcat.service.http.HttpConnectionHandler"/>
            <Parameter name="port" 
                value="8080"/>
        </Connector>

        <!--
            Uncomment this for SSL support. 
            You _need_ to set up a server certificate if you want this
            to work, and you need JSSE.
            1. Add JSSE jars to CLASSPATH 
            2. Edit java.home/jre/lib/security/java.security
               Add:
               security.provider.2=com.sun.net.ssl.internal.ssl.Provider
            3. Do: keytool -genkey -alias tomcat -keyalg RSA
               RSA is essential to work with Netscape and IIS.
               Use "changeit" as password. ( or add keypass attribute )
               You don't need to sign the certificate.
 
            You can set parameter keystore and keypass if you want 
            to change the default ( user.home/.keystore with changeit )
         -->
	<!--
        <Connector
className="org.apache.tomcat.service.PoolTcpConnector">
            <Parameter name="handler" 
               
value="org.apache.tomcat.service.http.HttpConnectionHandler"/>
            <Parameter name="port" 
                value="8443"/>
            <Parameter name="socketFactory" 
                value="org.apache.tomcat.net.SSLSocketFactory" />
				<Parameter name="keystore" 
					 value="/etc/httpd/ssl.key/server.key" />
				<Parameter name="keypass"
					 value="changeit" />
				<Parameter name="clientAuth"
					 value="false" />				
        </Connector>
	-->

Re: Apache webserver-Tomcat-openssl-Soap

Posted by Pablo <pa...@eneris.com>.
On 03 May 2001 13:10:03 +0200, Arno Hartmann wrote:
> We are using 
> the apache webserver and tomcat3.2.1.
> The apache webserver is configured with an openssl server certificate. 
> tomcat's ssl-section in server.xml is uncomment. 
> Now we want to install Soap. 
> 
> The soap-samples are working, if we use http.
> (http://localhost:8080/soap)
> If we use httpS we can't connect to soap. 
> 
> The url https://localhost:8443/soap says:
>       netscape can't find the server
> The Url https://localhost/soap says 
>       The requested URL /soap was not found on this server.
> The Url https://localhost:8080/soap doesn't answer anything even after 5
> minutes.
> 
> An other application (without soap) works fine. 
> Has anyone experience with this kind of configuration. 
> 
> thanks 
> 
> Arno
> 
> 
> Here are some parts of our configuration files: 
> http.conf : 
> 
> #
> # Port: The port to which the standalone server listens. For
> # ports < 1023, you will need httpd to be run as root initially.
> #
> # Port 80
> 
> ##
> ##  SSL Support
> ##
> ##  When we also provide SSL we have to listen to the 
> ##  standard HTTP port (see above) and to the HTTPS port
> ##
> <IfDefine SSL>
> Listen 80
> Listen 443
> </IfDefine>
> 
> 
> server.xml (Tomcat)
> <!-- ==================== Connectors ==================== -->
> 
>         <!-- Normal HTTP -->
>         <Connector
> className="org.apache.tomcat.service.PoolTcpConnector">
>             <Parameter name="handler" 
>                
> value="org.apache.tomcat.service.http.HttpConnectionHandler"/>
>             <Parameter name="port" 
>                 value="8080"/>
>         </Connector>
> 
>         <!--
>             Uncomment this for SSL support. 
>             You _need_ to set up a server certificate if you want this
>             to work, and you need JSSE.
>             1. Add JSSE jars to CLASSPATH 
>             2. Edit java.home/jre/lib/security/java.security
>                Add:
>                security.provider.2=com.sun.net.ssl.internal.ssl.Provider
>             3. Do: keytool -genkey -alias tomcat -keyalg RSA
>                RSA is essential to work with Netscape and IIS.
>                Use "changeit" as password. ( or add keypass attribute )
>                You don't need to sign the certificate.
>  
>             You can set parameter keystore and keypass if you want 
>             to change the default ( user.home/.keystore with changeit )
>          -->


I would say that you should uncomment (remove) the following line "<!--"
and the closing one

>       <!--


>         <Connector
> className="org.apache.tomcat.service.PoolTcpConnector">
>             <Parameter name="handler" 
>                
> value="org.apache.tomcat.service.http.HttpConnectionHandler"/>
>             <Parameter name="port" 
>                 value="8443"/>
>             <Parameter name="socketFactory" 
>                 value="org.apache.tomcat.net.SSLSocketFactory" />
>                               <Parameter name="keystore" 
>                                        value="/etc/httpd/ssl.key/server.key" />
>                               <Parameter name="keypass"
>                                        value="changeit" />
>                               <Parameter name="clientAuth"
>                                        value="false" />                               
>         </Connector>


Remove the following one too:

>       -->


> --=-Nut9yAqArqJ8zhAPLQ1+
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: soap-user-unsubscribe@xml.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: soap-user-unsubscribe@xml.apache.org
For additional commands, email: soap-user-help@xml.apache.org


Re: Apache webserver-Tomcat-openssl-Soap

Posted by Pablo <pa...@eneris.com>.
On 03 May 2001 13:10:03 +0200, Arno Hartmann wrote:
> We are using 
> the apache webserver and tomcat3.2.1.
> The apache webserver is configured with an openssl server certificate. 
> tomcat's ssl-section in server.xml is uncomment. 
> Now we want to install Soap. 
> 
> The soap-samples are working, if we use http.
> (http://localhost:8080/soap)
> If we use httpS we can't connect to soap. 
> 
> The url https://localhost:8443/soap says:
>       netscape can't find the server
> The Url https://localhost/soap says 
>       The requested URL /soap was not found on this server.
> The Url https://localhost:8080/soap doesn't answer anything even after 5
> minutes.
> 
> An other application (without soap) works fine. 
> Has anyone experience with this kind of configuration. 
> 
> thanks 
> 
> Arno
> 
> 
> Here are some parts of our configuration files: 
> http.conf : 
> 
> #
> # Port: The port to which the standalone server listens. For
> # ports < 1023, you will need httpd to be run as root initially.
> #
> # Port 80
> 
> ##
> ##  SSL Support
> ##
> ##  When we also provide SSL we have to listen to the 
> ##  standard HTTP port (see above) and to the HTTPS port
> ##
> <IfDefine SSL>
> Listen 80
> Listen 443
> </IfDefine>
> 
> 
> server.xml (Tomcat)
> <!-- ==================== Connectors ==================== -->
> 
>         <!-- Normal HTTP -->
>         <Connector
> className="org.apache.tomcat.service.PoolTcpConnector">
>             <Parameter name="handler" 
>                
> value="org.apache.tomcat.service.http.HttpConnectionHandler"/>
>             <Parameter name="port" 
>                 value="8080"/>
>         </Connector>
> 
>         <!--
>             Uncomment this for SSL support. 
>             You _need_ to set up a server certificate if you want this
>             to work, and you need JSSE.
>             1. Add JSSE jars to CLASSPATH 
>             2. Edit java.home/jre/lib/security/java.security
>                Add:
>                security.provider.2=com.sun.net.ssl.internal.ssl.Provider
>             3. Do: keytool -genkey -alias tomcat -keyalg RSA
>                RSA is essential to work with Netscape and IIS.
>                Use "changeit" as password. ( or add keypass attribute )
>                You don't need to sign the certificate.
>  
>             You can set parameter keystore and keypass if you want 
>             to change the default ( user.home/.keystore with changeit )
>          -->


I would say that you should uncomment (remove) the following line "<!--"
and the closing one

>       <!--


>         <Connector
> className="org.apache.tomcat.service.PoolTcpConnector">
>             <Parameter name="handler" 
>                
> value="org.apache.tomcat.service.http.HttpConnectionHandler"/>
>             <Parameter name="port" 
>                 value="8443"/>
>             <Parameter name="socketFactory" 
>                 value="org.apache.tomcat.net.SSLSocketFactory" />
>                               <Parameter name="keystore" 
>                                        value="/etc/httpd/ssl.key/server.key" />
>                               <Parameter name="keypass"
>                                        value="changeit" />
>                               <Parameter name="clientAuth"
>                                        value="false" />                               
>         </Connector>


Remove the following one too:

>       -->


> --=-Nut9yAqArqJ8zhAPLQ1+
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: soap-user-unsubscribe@xml.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: soap-user-unsubscribe@xml.apache.org
For additional commands, email: soap-user-help@xml.apache.org