You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Ajay TS <aj...@gmail.com> on 2010/12/22 19:06:41 UTC
unable to configure SSL in Tomcat 7.0
I am new to Tomcat and am trying to install Apache Tomcat 7.0.5 on Windows 7
with java version "1.6.0_21". I am able to install it fine but unable to
configure SSL. I am configuring it on port 8443 based on documentation
provided. After configuration and restarting the Apache Tomcat 7 service I
am able to connect tohttp://localhost:8080 but not to https://localhost:8443.
Strangely http://localhost:8443 works fine
Connector information:
<Connector port="8443"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="true" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="${user.home}/.keystore"
keystorePass="changeit" />
Attached is the error catalina file but heres the line I am confused about:
Dec 22, 2010 9:35:35 AM org.apache.tomcat.util.net.jsse.JSSESocketFactory
getStore
SEVERE: Failed to load keystore type JKS with path
C:\Windows\System32\config\systemprofile/.keystore due to
C:\Windows\System32\config\systemprofile\.keystore (The system cannot find
the file specified)
java.io.FileNotFoundException:
C:\Windows\System32\config\systemprofile\.keystore (The system cannot find
the file specified)
at java.io.FileInputStream.open(Native Method)
at java.io.FileInputStream.<init>(Unknown Source)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:382)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:283)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeyManagers(JSSESocketFactory.java:533)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory.java:464)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocketFactory.java:131)
at org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:384)
at org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:118)
at org.apache.catalina.connector.Connector.initInternal(Connector.java:873)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:100)
at
org.apache.catalina.core.StandardService.initInternal(StandardService.java:555)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:100)
at
org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:729)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:100)
at org.apache.catalina.startup.Catalina.load(Catalina.java:548)
at org.apache.catalina.startup.Catalina.load(Catalina.java:571)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:262)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:430)
--
Regards,
Ajay
Re: unable to configure SSL in Tomcat 7.0
Posted by Pid <pi...@pidster.com>.
On 23/12/2010 02:43, Christopher Schultz wrote:
> Filip,
>
> On 12/22/2010 6:03 PM, Filip Hanik - Dev Lists wrote:
>> I'd definitely consider it a bug if tomcat continues startup in HTTP
>> mode instead, when the file is not found.
>
> I seem to remember a recent bugfix that won't allow a connector to
> partially init. I can't seem to find the bug report at the moment. :(
>
> -chris
Yep, there was a thread which reported something similar.
p
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: unable to configure SSL in Tomcat 7.0
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Filip,
On 12/22/2010 6:03 PM, Filip Hanik - Dev Lists wrote:
> I'd definitely consider it a bug if tomcat continues startup in HTTP
> mode instead, when the file is not found.
I seem to remember a recent bugfix that won't allow a connector to
partially init. I can't seem to find the bug report at the moment. :(
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAk0StzwACgkQ9CaO5/Lv0PDR9ACeNUIvUBUlkPgT7g4PP1zE/n1g
IU8AnA70Ns88/WgPGj386H+AR2nRTveJ
=T/QK
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: unable to configure SSL in Tomcat 7.0
Posted by Filip Hanik - Dev Lists <de...@hanik.com>.
I'd definitely consider it a bug if tomcat continues startup in HTTP mode instead, when the file is not found.
Filip
On 12/22/2010 3:35 PM, Pid * wrote:
> On 22 Dec 2010, at 18:07, Ajay TS<aj...@gmail.com> wrote:
>
> I am new to Tomcat and am trying to install Apache Tomcat 7.0.5 on Windows 7
> with java version "1.6.0_21". I am able to install it fine but unable to
> configure SSL. I am configuring it on port 8443 based on documentation
> provided. After configuration and restarting the Apache Tomcat 7 service I
> am able to connect tohttp://localhost:8080 but not to https://localhost:8443.
> Strangely http://localhost:8443 works fine
>
> Connector information:
> <Connector port="8443"
> maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
> enableLookups="true" disableUploadTimeout="true"
> acceptCount="100" scheme="https" secure="true"
> clientAuth="false" sslProtocol="TLS"
> keystoreFile="${user.home}/.keystore"
> keystorePass="changeit" />
>
>
> Attached is the error catalina file but heres the line I am confused about:
> Dec 22, 2010 9:35:35 AM org.apache.tomcat.util.net.jsse.JSSESocketFactory
> getStore
> SEVERE: Failed to load keystore type JKS with path
> C:\Windows\System32\config\systemprofile/.keystore due to
> C:\Windows\System32\config\systemprofile\.keystore (The system cannot find
> the file specified)
> java.io.FileNotFoundException:
>
>
> What's not clear about the above?
> You told Tomcat where to look for the keystore file, and it's not there.
>
> Put the real path to the keystore in the attribute instead.
>
>
> p
>
>
>
> C:\Windows\System32\config\systemprofile\.keystore (The system cannot find
> the file specified)
> at java.io.FileInputStream.open(Native Method)
> at java.io.FileInputStream.<init>(Unknown Source)
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:382)
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:283)
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeyManagers(JSSESocketFactory.java:533)
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory.java:464)
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocketFactory.java:131)
> at org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:384)
> at org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:118)
> at org.apache.catalina.connector.Connector.initInternal(Connector.java:873)
> at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:100)
> at
> org.apache.catalina.core.StandardService.initInternal(StandardService.java:555)
> at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:100)
> at
> org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:729)
> at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:100)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:548)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:571)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
> at java.lang.reflect.Method.invoke(Unknown Source)
> at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:262)
> at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:430)
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: unable to configure SSL in Tomcat 7.0
Posted by Pid * <pi...@pidster.com>.
On 22 Dec 2010, at 18:07, Ajay TS <aj...@gmail.com> wrote:
I am new to Tomcat and am trying to install Apache Tomcat 7.0.5 on Windows 7
with java version "1.6.0_21". I am able to install it fine but unable to
configure SSL. I am configuring it on port 8443 based on documentation
provided. After configuration and restarting the Apache Tomcat 7 service I
am able to connect tohttp://localhost:8080 but not to https://localhost:8443.
Strangely http://localhost:8443 works fine
Connector information:
<Connector port="8443"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="true" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="${user.home}/.keystore"
keystorePass="changeit" />
Attached is the error catalina file but heres the line I am confused about:
Dec 22, 2010 9:35:35 AM org.apache.tomcat.util.net.jsse.JSSESocketFactory
getStore
SEVERE: Failed to load keystore type JKS with path
C:\Windows\System32\config\systemprofile/.keystore due to
C:\Windows\System32\config\systemprofile\.keystore (The system cannot find
the file specified)
java.io.FileNotFoundException:
What's not clear about the above?
You told Tomcat where to look for the keystore file, and it's not there.
Put the real path to the keystore in the attribute instead.
p
C:\Windows\System32\config\systemprofile\.keystore (The system cannot find
the file specified)
at java.io.FileInputStream.open(Native Method)
at java.io.FileInputStream.<init>(Unknown Source)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:382)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:283)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeyManagers(JSSESocketFactory.java:533)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory.java:464)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocketFactory.java:131)
at org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:384)
at org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:118)
at org.apache.catalina.connector.Connector.initInternal(Connector.java:873)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:100)
at
org.apache.catalina.core.StandardService.initInternal(StandardService.java:555)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:100)
at
org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:729)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:100)
at org.apache.catalina.startup.Catalina.load(Catalina.java:548)
at org.apache.catalina.startup.Catalina.load(Catalina.java:571)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:262)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:430)
--
Regards,
Ajay
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org