You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@cxf.apache.org by Willem777 <wi...@gmail.com> on 2008/02/11 16:27:01 UTC

SSL, Spring, TomCat

Hi everyone,

I'm very new with CXF and Spring - so pardon my ignorance.

I've got a CXF annotation-based web service which I host in Tomcat in a
Spring app. I want to configure SSL. On the CXF website I only see config
samples for the client and the standalone HTTP (Jetty)

I use Tomcat - so what must I configure on the server side to tell CXF to
use SSL?

I appreciate any help!!

Thanks guys
-- 
View this message in context: http://www.nabble.com/SSL%2C-Spring%2C-TomCat-tp15413105p15413105.html
Sent from the cxf-user mailing list archive at Nabble.com.

Re: SSL, Spring, TomCat

Posted by Fred Dushin <fr...@dushin.net>.

You'll need to edit your tomcat configuration (${CATALINA_HOME}/conf/ 
sever.xml) to enable an HTTP/S Connector.  The default server.xml  
config comes with a commented-out Connector definition for SSL, though  
we've had to add extra keystoreFile and keystorePassword attributes,  
using our own keys.  I'm assuming you aren't doing client certificate  
authentication -- there are probably other parameters you'd need to  
set for that (e.g., a trust store).

-Fred

On Feb 11, 2008, at 10:27 AM, Willem777 wrote:

>
> Hi everyone,
>
> I'm very new with CXF and Spring - so pardon my ignorance.
>
> I've got a CXF annotation-based web service which I host in Tomcat  
> in a
> Spring app. I want to configure SSL. On the CXF website I only see  
> config
> samples for the client and the standalone HTTP (Jetty)
>
> I use Tomcat - so what must I configure on the server side to tell  
> CXF to
> use SSL?
>
> I appreciate any help!!
>
> Thanks guys
> -- 
> View this message in context: http://www.nabble.com/SSL%2C-Spring%2C-TomCat-tp15413105p15413105.html
> Sent from the cxf-user mailing list archive at Nabble.com.
>
>

Re: SSL, Spring, TomCat

Posted by Willem777 <wi...@gmail.com>.

Thanks guys - makes a lot of sense now. 



Willem777 wrote:
> 
> Hi everyone,
> 
> I'm very new with CXF and Spring - so pardon my ignorance.
> 
> I've got a CXF annotation-based web service which I host in Tomcat in a
> Spring app. I want to configure SSL. On the CXF website I only see config
> samples for the client and the standalone HTTP (Jetty)
> 
> I use Tomcat - so what must I configure on the server side to tell CXF to
> use SSL?
> 
> I appreciate any help!!
> 
> Thanks guys
> 

-- 
View this message in context: http://www.nabble.com/SSL%2C-Spring%2C-TomCat-tp15413105p15426689.html
Sent from the cxf-user mailing list archive at Nabble.com.

RE: SSL, Spring, TomCat

Posted by "Arundel, Donal" <do...@iona.com>.

Hi Willem,

You will want to configure tomcat to do the SSL comms.

Have a look at the $CATALINA_HOME/conf/server.xml config file.

Search for SSL in this file and you should find a commented out Tomcat
configuration element for an SSL connector.

Some example config is below.

As for any SSL application at you will need to configure what certs and
keys to use, more detail will be on the apache tomcat website.
Tomcat does support the Java Keystore format and also the PKCS#12 format
(a language neutral industry standard).

    <!-- Define a SSL HTTP/1.1 Connector on port 8443 -->
    
    <!-- was commented out -->
    <Connector port="8443" maxHttpHeaderSize="8192"
               maxThreads="150" minSpareThreads="25"
maxSpareThreads="75"
               enableLookups="false" disableUploadTimeout="true"
               acceptCount="100" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS"

               keystoreFile="C:\sample_certs\keys\bob.jks"
               keystorePass="password" /> 
               <!-- keystoreFile=" C:\sample_certs\keys\bob.jks"
               keystorePass="password" /> -->
                                             
    <!-- end of was commented out -->


Note: for CXF client side outbound comms you would need to configure SSL
settings as normal for CXF, tomcat would not be in the loop there.

Cheers,
    Donal


-----Original Message-----
From: Willem777 [mailto:willem.neethling@gmail.com] 
Sent: 11 February 2008 15:27
To: cxf-user@incubator.apache.org
Subject: SSL, Spring, TomCat


Hi everyone,

I'm very new with CXF and Spring - so pardon my ignorance.

I've got a CXF annotation-based web service which I host in Tomcat in a
Spring app. I want to configure SSL. On the CXF website I only see
config
samples for the client and the standalone HTTP (Jetty)

I use Tomcat - so what must I configure on the server side to tell CXF
to
use SSL?

I appreciate any help!!

Thanks guys
-- 
View this message in context:
http://www.nabble.com/SSL%2C-Spring%2C-TomCat-tp15413105p15413105.html
Sent from the cxf-user mailing list archive at Nabble.com.

----------------------------
IONA Technologies PLC (registered in Ireland)
Registered Number: 171387
Registered Address: The IONA Building, Shelbourne Road, Dublin 4, Ireland