Re: Tomcat SSL without plaintext Certificate-Keyphrase

[Bill Barker <re...@verizon.net>]

"Henning Meyer" <He...@web.de> wrote in message
news:IPEMICEFLNGMONDCIFMBOEOBCCAA.Henning-Meyer@web.de...
> Hello,
>
> I want to set up a Tomcat Server, without having the SSL keyphrase a
> plaintext readable for the Tomcat-running user.
> At this time I think it has to be in the config.xml-file.
> Is there a solution like having to type in the keyphrase every time the
> server starts up?
> Is there a soulution like having the passphrase only readable for root and
> letting the server automaticly starting up?
> e.g. root starts the server, and then the server is switching its userid?
>
> I hope you will help me!

For Tomcat 3.3.x, you can use the PasswordPrompter from the add-ons (under
the usual download link).

I had thought that this one was originally back-ported from 4.x, but I'm
afraid that I can't find where the 4.x version lives at the moment.

>
> Thanks a lot.
>
>
>
> Henning Meyer
> ----------------------------
> Lisa Simpson: Why do I have the feeling that someday I'll be describing
this
> to a psychiatrist?





--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>