Also, you can setup Apache (or other webserver) with SSL and then just add
the filter to send requests to /services to Tomcat.  This requires no change
in config on Tomcat side I believe. 

-----Original Message-----
From: Venkat Reddy [mailto:[EMAIL PROTECTED] 
Sent: Thursday, October 07, 2004 10:37 AM
To: [EMAIL PROTECTED]
Subject: Re: SSL with Axis

Here is roughly how you can make Axis talk to tomcat using SS (or atleast
that's how i could make it work).

1. Setup a keystore for client
2. Setup a keystore for server
3. Export server's public key certificate to a file and import it into
client's keystore.
4. Export client's public key certificate to a file and import it into
server's keystore.
5. Edit tomcat's server.xml to add a Connector for SSL - 
    <Connector port="8443" minProcessors="10" maxProcessors="50"
acceptCount="100" scheme="https" secure="true">
      <Factory keystoreFile="<location>\server.keystore"
keystorePass="<keystorePassword>"
               clientAuth="false" protocol="TLS" />
    </Connector>

6. Startup tomcat and make sure it listens on SSL by pointing your browser
to something like "https://<server>:8443/index.jsp".
7. Run axis client with the following JVM options - 
        -Djavax.net.ssl.trustStore=<location>\client.keystore 
        -Djavax.net.ssl.trustStorePassword=<trustStorePassword>
        -Djavax.net.debug=true  // only requried to debug
        -Djavax.net.ssl.keyStore=<location>\client.keystore
        -Djavax.net.ssl.keyStorePassword=<keyStorePassword>
        
8. Make sure you are using "https:" for all URLs while using Axis client.

Hope that helps
-- Venkat


On Thu, 7 Oct 2004 10:06:12 -0400, Hubble, Christopher
<[EMAIL PROTECTED]> wrote:
> How do you enable SSL using Axis?  I know how to set up the client 
> using a keystore, but how do you set up the server?  Is there a way to 
> pass a keystore to it, or do you have to use the overall java keystore?
> 
> Chris
>


Reply via email to