You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by "Jeffery G. Summers" <js...@transy.edu> on 2006/02/02 18:18:54 UTC

Port 8443 won't become active

Hello!  I'm brand-new to Tomcat and am under the gun to learn it quickly.
The short story:  My University hired our Software Vendor to upgrade our
administrative web software.  We also hired them to move us from iPlanet to
Jakarta Tomcat 5.0.28.  Currently we can access our web software on port 80.
The problem is enabling SSL on port 8443.  We're stuck and the software
vendor hasn't been helpful (yet).  I don't know if the problem was caused by
something the consultant did not do upon setup or something we are missing
elsewhere.

Our webserver is an IBM P615C AIX 5.2 box.  I have attempted the following
to enable port 8443:

1)  keytool -genkey -alias tomcat -keyalg RSA
2)  Edited server.xml and uncommented the port 8443 connector
3)  Stopped/Started Tomcat

When I run telnet localhost 80 I get a connection.  When I try telnet
localhost 8443 I get a denied connection message.  I have re-commented the
port 8443 connector and then changed my port 80 (formerly 8080) to 8443 and
restarted Tomcat.

After doing this I was able to go to http://localhost:8443 with no problems.
Of course, it is http and not https.  Since the port activates I'm led to
believe it's either a Tomcat setup issue or perhaps something to do with
AIX.  I changed things back so port 80 was active again and I uncommented
port 8443 and restarted Tomcat again.  The catalina.out log file shows some
errors which may have something to do with the problem but I don't know what
to do at this point.  Please help this novice!  Thanks!

====================================
Jeffery G. Summers
System Administrator
Transylvania University
Colleague R17/Ben 5.1/AIX 5.3.3
WebAdvisor 3.0/AIX 5.2/Tomcat 5.0.28
=====================================

The errors:

Feb 2, 2006 10:20:20 AM org.apache.coyote.http11.Http11Protocol pause
INFO: Pausing Coyote HTTP/1.1 on http-8443

Feb 2, 2006 10:20:20 AM org.apache.coyote.tomcat5.CoyoteConnector pause

SEVERE: Protocol handler pause failed

java.lang.NullPointerException
Feb 2, 2006 10:20:22 AM org.apache.coyote.http11.Http11Protocol destroy

INFO: Stopping Coyote HTTP/1.1 on http-8443

Feb 2, 2006 10:20:22 AM org.apache.coyote.tomcat5.CoyoteConnector stop

SEVERE: Coyote connector has not been started
Feb 2, 2006 10:20:40 AM org.apache.coyote.http11.Http11Protocol start
SEVERE: Error initializing endpoint

java.io.IOException: Algorithm SunX509 not available  




Successfully Scanned by the McAfee SIG 3200 Appliance.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


RE: Port 8443 won't become active

Posted by "Jeffery G. Summers" <js...@transy.edu>.
We're using version 1.4.2.  When we used SunONE (iPlanet) we had 1.3.1 and
that old directory still exists (/usr/java131).  I think the old directory
can be blown away since we have everything we need with /usr/java14 and have
removed the apps that had to use the previous version.  

-----Original Message-----
From: Peter Crowther [mailto:Peter.Crowther@melandra.com] 
Sent: Thursday, February 02, 2006 12:28 PM
To: Tomcat Users List
Subject: RE: Port 8443 won't become active

> From: Jeffery G. Summers [mailto:jsummers@transy.edu] 
> Our webserver is an IBM P615C AIX 5.2 box.
 
Whose JVM and what version?
 
- Peter


Successfully scanned by McAfee SIG 3200 Appliance.



Successfully Scanned by the McAfee SIG 3200 Appliance.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


RE: Port 8443 won't become active

Posted by "Jeffery G. Summers" <js...@transy.edu>.
OK, so it isn't the java version.  I've ensured JAVA_HOME is correct and
that the PATH is pointing to the right version.  All the jars are running
through 1.4.2.

I'm stumped.  I've gone through various docs/faqs and can't find anything
that helps.  I know port 8443 can be activated because I changed the http
port 80 connector to port 8443.  I connected to my site using :8443 in the
url but, of course, it's not https.

The only thing I can see that appears to be an issue is this error in the
logs:

Feb 3, 2006 6:57:54 AM org.apache.catalina.startup.Catalina start

SEVERE: Catalina.start:   LifecycleException:  Protocol handler start
failed: java.io.IOException: Algorithm SunX509 not available

I've no idea how to resolve this issue.  Any clues?  I've found some obscure
info on changing something called java.secure and making sure a few jar
files exist, but I don't know where this java.secure file is, how it should
be edited (if it really needs it) or where I should get the jar files since
we don't have them (Jcert.JAR , jNET.JAR,jSSE.jar in jre/lib/ext)

Thanks!

Jeff

-----Original Message-----
From: Jeffery G. Summers [mailto:jsummers@transy.edu] 
Sent: Thursday, February 02, 2006 1:53 PM
To: 'Tomcat Users List'
Subject: RE: Port 8443 won't become active

When we contracted our upgrades the consultant installed version 1.4.2 but
when I just ran "java -version" the box tells me that 1.3.1 is the one
running in memory!  I've never stopped/started java, etc. and I plan on
making the consultant finish the job on this...but, if I want to try it does
anyone have a "Quickie Guide" I could use?

Thanks!

Jeff

-----Original Message-----
From: Peter Crowther [mailto:Peter.Crowther@melandra.com] 
Sent: Thursday, February 02, 2006 12:28 PM
To: Tomcat Users List
Subject: RE: Port 8443 won't become active

> From: Jeffery G. Summers [mailto:jsummers@transy.edu] 
> Our webserver is an IBM P615C AIX 5.2 box.
 
Whose JVM and what version?
 
- Peter


Successfully scanned by McAfee SIG 3200 Appliance.



Successfully Scanned by the McAfee SIG 3200 Appliance.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org



Successfully scanned by McAfee SIG 3200 Appliance.



Successfully Scanned by the McAfee SIG 3200 Appliance.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


RE: Port 8443 won't become active

Posted by "Jeffery G. Summers" <js...@transy.edu>.
When we contracted our upgrades the consultant installed version 1.4.2 but
when I just ran "java -version" the box tells me that 1.3.1 is the one
running in memory!  I've never stopped/started java, etc. and I plan on
making the consultant finish the job on this...but, if I want to try it does
anyone have a "Quickie Guide" I could use?

Thanks!

Jeff

-----Original Message-----
From: Peter Crowther [mailto:Peter.Crowther@melandra.com] 
Sent: Thursday, February 02, 2006 12:28 PM
To: Tomcat Users List
Subject: RE: Port 8443 won't become active

> From: Jeffery G. Summers [mailto:jsummers@transy.edu] 
> Our webserver is an IBM P615C AIX 5.2 box.
 
Whose JVM and what version?
 
- Peter


Successfully scanned by McAfee SIG 3200 Appliance.



Successfully Scanned by the McAfee SIG 3200 Appliance.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


RE: Port 8443 won't become active

Posted by Peter Crowther <Pe...@melandra.com>.
> From: Jeffery G. Summers [mailto:jsummers@transy.edu] 
> Our webserver is an IBM P615C AIX 5.2 box.
 
Whose JVM and what version?
 
- Peter