You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Kenneth Aung <ke...@gmail.com> on 2009/06/25 21:54:22 UTC
SSL requests not forwarding to jk on Solaris x86
I have run into a strange problem.
I have installed apache 2.2.11 from source. Installed nTrust certs.
Everything works fine.
I also installed Tomcat 5.5.27. Tested by itself port 8080 etc. all works
fine.
Then, mod_jk compiled the latest 1.2.28 from source (no binaries available).
Set up workers.properties etc.
---
worker.list=worker1
worker.worker1.type=ajp13
worker.worker1.host=localhost
worker.worker1.port=8009
---
httpd.conf
---
JkWorkersFile /usr/local/apache2/conf/workers.properties
JkShmFile /usr/local/apache2/logs/mod_jk.shm
JkLogFile /usr/local/apache2/logs/mod_jk.log
JkLogLevel info
JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "
jkMount /* worker1
---
So, I am forwarding everything from Apache to Tomcat
http://<server>/ comes back with the usual Tomcat starter page
https://<server>/ comes back with Apache "It works!"
--
Perhaps, it's a config issue.
But, this worked fine with older versions of Apache/Tomcat/mod_jk on
Sparc!!!
Any help would be appreciated.
Thanks
Re: SSL requests not forwarding to jk on Solaris x86
Posted by Kenneth Aung <ke...@gmail.com>.
Chris
Thank you kind sir! You are a true gentlemen.
I changed jkMount to JkMount (caps J) for consistency. I usually catch
things like this, but not this time.
I do have SSL configs in a separate file http-ssl.conf file in conf/extra.
Since I kept changes to a minimum, it was, as delivered in separate virtual
host.
Then in httpd.conf, after reading the instructions, I added,
JkMountCopy All
It works like a charm!
Thanks again
On Fri, Jun 26, 2009 at 9:36 AM, Christopher Schultz <
chris@christopherschultz.net> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Kenneth,
>
> On 6/25/2009 3:54 PM, Kenneth Aung wrote:
> > Then, mod_jk compiled the latest 1.2.28 from source (no binaries
> available).
>
> Building from source is the best option IMHO. Glad you didn't have any
> problems (although running 'make' isn't that hard, we find a lot of
> people balking at the idea of building their own mod_jk).
>
> > Set up workers.properties etc.
>
> Looks fine.
>
> > ---
> > httpd.conf
> > ---
> > JkWorkersFile /usr/local/apache2/conf/workers.properties
> > JkShmFile /usr/local/apache2/logs/mod_jk.shm
> > JkLogFile /usr/local/apache2/logs/mod_jk.log
> > JkLogLevel info
> > JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "
> > jkMount /* worker1
>
> Obviously this isn't the problem but you might want to use "JkMount"
> (note the capitalization) for consistency.
>
> > So, I am forwarding everything from Apache to Tomcat
> > http://<server>/ comes back with the usual Tomcat starter page
>
> Good.
>
> > https://<server>/ comes back with Apache "It works!"
>
> Not good.
>
> This is probably because you have your JkMount statements at the "top
> level" of httpd.conf. I suspect that your SSL configuration (which may
> be in a different file) is in a separate VirtualHost.
>
> If your existing config is at the top-level (that is, not within a
> VirtualHost), you'll need to put a "JkMountCopy" directive into your SSL
> VirtualHost.
>
> See http://tomcat.apache.org/connectors-doc/reference/apache.html search
> for "JkMountCopy".
>
> If you have your JkMount configuration in a separate VirtualHost (that
> is, NOT at the top-level), then you'll need to either move them to the
> top-level OR duplicate them in your SSL VirtualHost.
>
> > But, this worked fine with older versions of Apache/Tomcat/mod_jk on
> > Sparc!!!
>
> You're not crazy: at some point, mod_jk changed to not automatically
> inherit the JkMount configuration from the global configuration.
>
> Hope that helps,
> - -chris
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkpEzs0ACgkQ9CaO5/Lv0PAMsQCggGTtHxUgHrtCcQ5KKn/QcozT
> l2MAnjGLQNzhXA+9F2qKAnaHTwaccngf
> =jLbn
> -----END PGP SIGNATURE-----
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
Re: SSL requests not forwarding to jk on Solaris x86
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Kenneth,
On 6/25/2009 3:54 PM, Kenneth Aung wrote:
> Then, mod_jk compiled the latest 1.2.28 from source (no binaries available).
Building from source is the best option IMHO. Glad you didn't have any
problems (although running 'make' isn't that hard, we find a lot of
people balking at the idea of building their own mod_jk).
> Set up workers.properties etc.
Looks fine.
> ---
> httpd.conf
> ---
> JkWorkersFile /usr/local/apache2/conf/workers.properties
> JkShmFile /usr/local/apache2/logs/mod_jk.shm
> JkLogFile /usr/local/apache2/logs/mod_jk.log
> JkLogLevel info
> JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "
> jkMount /* worker1
Obviously this isn't the problem but you might want to use "JkMount"
(note the capitalization) for consistency.
> So, I am forwarding everything from Apache to Tomcat
> http://<server>/ comes back with the usual Tomcat starter page
Good.
> https://<server>/ comes back with Apache "It works!"
Not good.
This is probably because you have your JkMount statements at the "top
level" of httpd.conf. I suspect that your SSL configuration (which may
be in a different file) is in a separate VirtualHost.
If your existing config is at the top-level (that is, not within a
VirtualHost), you'll need to put a "JkMountCopy" directive into your SSL
VirtualHost.
See http://tomcat.apache.org/connectors-doc/reference/apache.html search
for "JkMountCopy".
If you have your JkMount configuration in a separate VirtualHost (that
is, NOT at the top-level), then you'll need to either move them to the
top-level OR duplicate them in your SSL VirtualHost.
> But, this worked fine with older versions of Apache/Tomcat/mod_jk on
> Sparc!!!
You're not crazy: at some point, mod_jk changed to not automatically
inherit the JkMount configuration from the global configuration.
Hope that helps,
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkpEzs0ACgkQ9CaO5/Lv0PAMsQCggGTtHxUgHrtCcQ5KKn/QcozT
l2MAnjGLQNzhXA+9F2qKAnaHTwaccngf
=jLbn
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org