[solution] sudden JVM death on some linux systems

[pero <pe...@antaramusic.de>]

Hi there,

I noticed several threads on this mailinglist dealing with "sudden tomcat
death". I sent some mails concerning this too some days ago. The problem was
that tomcat (4) died after a random amount of time. Most people came to the
conclusion that there must be something wrong with the JVM.
After trying and trying (way too long) and scanning the internet (for
days )-:) and Sun's Bug-Reports I found that some Linux-Distributions
(escpecially with 2.4 kernel) have problems with Sun's JVM (>= 1.3).
What helped in my case (SuSE 7.1: tomcat didn't work with *any* JDK - and I
tried *all*!) was decreasing the stack-size to 2M by adding "ulimit -s 2048"
to my startup-script (see
http://developer.java.sun.com/developer/bugParade/bugs/4466587.html).

perhaps this works for others too and they could live on with a little grin
knowing that their tomcat is running... and running... and running...

cheers,
pero

..: I *LOVE* [my] tomcat...

Re: Thawte, SSL, and Tomcat

[jean-frederic clere <jf...@fujitsu-siemens.com>]

Jon Shoberg wrote:
> 
> Hypothetical situation ...
> 
>         I have the domain "secure.foobar.com" and a Thawte SSL certificate
> configured with Apache (mod_ssl).  The file provided back from Thawte is
> called "secure.foobar.com.crt".  Is there a way to use that certificate in
> setting up https://secure.foobar.com:8443/myWebApp/ ? Do I have to go back
> to Thawte for another cert if I want to provide SSL though tomcat?

Use a Apache/Tomcat connector like mod_jk.

> 
>         Does anyone have, literally, "blind instructions" for setting up a
> commercial SSL cert?  The current docs are pretty good but I am looking for
> something related to tomcat 3.x.x which covers creation and install of a
> commercial cert.
> 
> Thanks

Thawte, SSL, and Tomcat

[Jon Shoberg <js...@cbd.net>]

Hypothetical situation ...

	I have the domain "secure.foobar.com" and a Thawte SSL certificate
configured with Apache (mod_ssl).  The file provided back from Thawte is
called "secure.foobar.com.crt".  Is there a way to use that certificate in
setting up https://secure.foobar.com:8443/myWebApp/ ? Do I have to go back
to Thawte for another cert if I want to provide SSL though tomcat?

	Does anyone have, literally, "blind instructions" for setting up a
commercial SSL cert?  The current docs are pretty good but I am looking for
something related to tomcat 3.x.x which covers creation and install of a
commercial cert.

Thanks

RE: [solution] installing *OFFICIAL (commercial)* SSL-certificate

[Nick Torenvliet <to...@sympatico.ca>]

Just wondering are you running tomcat4.0 standalone?

P.S. Just want to let you know you are amazing!!!!

-----Original Message-----
From: pero [mailto:pero@antaramusic.de]
Sent: Sunday, September 23, 2001 3:08 AM
To: tomcat-user@jakarta.apache.org
Subject: [solution] installing *OFFICIAL (commercial)* SSL-certificate


Hi,

after long time of trying to setup a (demo)certificate from thawte.com or
trustcenter.de I finally made it. And because of the numerous questions on
this list concerning this topic, I thought it would be a good idea to share
my gained "wisdom" :-)
So what follows is a step-by-step instruction on how to install a commercial
(*not* self signed or openssl) certificate:
1. generate a local certificate:
   keytool -genkey -alias tomcat -keyalg RSA -keystore <myfile>
   where <myfile> is the name of the desired keystore-file
2. generate the CSR (you need it to request your (demo)certificate)
   keytool -certreq -keyalg RSA -alias tomcat -file certreq.pem -keystore
<myfile>
   now you have a file called "certreq.pem". Send this to your trustcenter.
3. most trustcenters do not deliver a so called "chained certificate",
   so you have to install their root-certificate (their website says where
to find it)
   keytool -import -alias root -keystore <myfile> -trustcacerts -file
<root-cert-file>
4. after your final (demo)certificate has been sent to you, install it like
this
   keytool -import -alias tomcat -keystore <myfile> -trustcacerts -file
<received-cert-file>

For the tomcat-specific part of the installation go to the *real good*
tomcat-doc-page:
http://jakarta.apache.org/tomcat/tomcat-4.0-doc/ssl-howto.html

I hope it helped somebody... If there are any questions/suggestions/etc...
simply hit "REPLY" (-:

greets,
pero

[solution] installing *OFFICIAL (commercial)* SSL-certificate

[pero <pe...@antaramusic.de>]

Hi,

after long time of trying to setup a (demo)certificate from thawte.com or
trustcenter.de I finally made it. And because of the numerous questions on
this list concerning this topic, I thought it would be a good idea to share
my gained "wisdom" :-)
So what follows is a step-by-step instruction on how to install a commercial
(*not* self signed or openssl) certificate:
1. generate a local certificate:
   keytool -genkey -alias tomcat -keyalg RSA -keystore <myfile>
   where <myfile> is the name of the desired keystore-file
2. generate the CSR (you need it to request your (demo)certificate)
   keytool -certreq -keyalg RSA -alias tomcat -file certreq.pem -keystore
<myfile>
   now you have a file called "certreq.pem". Send this to your trustcenter.
3. most trustcenters do not deliver a so called "chained certificate",
   so you have to install their root-certificate (their website says where
to find it)
   keytool -import -alias root -keystore <myfile> -trustcacerts -file
<root-cert-file>
4. after your final (demo)certificate has been sent to you, install it like
this
   keytool -import -alias tomcat -keystore <myfile> -trustcacerts -file
<received-cert-file>

For the tomcat-specific part of the installation go to the *real good*
tomcat-doc-page:
http://jakarta.apache.org/tomcat/tomcat-4.0-doc/ssl-howto.html

I hope it helped somebody... If there are any questions/suggestions/etc...
simply hit "REPLY" (-:

greets,
pero