IIS 6.0, SSL, and Tomcat 5.0 set up problem.
I am running IIS 6.0 with Tomcat 5.0 on Windows Server 2003, and I am having a problem getting SSL to work. The following instructions are a portion of the article titled TOMCAT and SSL, and I have a questions about Do: keytool -genkey -alias tomcat -keyalg RSA. Where is this command typed into the system? Where do I key this information into the system? Are the commands entered in DOS? I have JSSE installed and the 3 jar files are in place in my CLASSPATH and in JAVA_HOME. IIS has a wizard that I use to create certificates and it does not permit me to enter the keytool parameters. I guess my next questions are: How do I created a certificate in my environment without using the wizard? Have the steps changed to get SSL to work in version 6.0 of IIS and version 5.0.28 of Tomcat? And if so, what steps do I now need to take to set this up properly? Your help in my setup issue is greatly apprieciated. DIRECT SSL Generate a SSL certificate (RSA) for tomcat I succeed (at least) with my IBM JDK 1.3 after: jsse jars MUST BE IN BOTH CLASSPATH and $JAVA_HOME/jre/lib/ext (JAVA 1.2) from server.xml doc.You _need_ to set up a server certificate if you want this to work, and you need JSSE. Add JSSE jars to CLASSPATH Edit $JAVA_HOME/jre/lib/security/java.security Add: security.provider.2=com.sun.net.ssl.internal.ssl.Provider Do: keytool -genkey -alias tomcat -keyalg RSA RSA is essential to work with Netscape and IIS. Use changeit as password (or add keypass attribute). You don't need to sign the certificate. You can set parameter keystore and keypass if you want to change the default ($HOME/.keystore with changeit) I suggest you install jcert.jar, jnet.jar and jsse.jar in $JAVA_HOME/jre/lib/ext and then add them to your CLASSPATH export CLASSPATH=$JAVA_HOME/jre/lib/ext/jcert.jar:$CLASSPATH export CLASSPATH=$JAVA_HOME/jre/lib/ext/jnet.jar:$CLASSPATH export CLASSPATH=$JAVA_HOME/jre/lib/ext/jsse.jar:$CLASSPATH You could also copy the 3 jars into $TOMCAT_HOME/lib/ so they are under the existing CLASSPATH at tomcat startup (tomcat.sh). - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
IIS 6.0 SSL port 443 and Tomcat 5.0 problem.
Software Platform: Windows Server 2003, IIS 6.0, SSL, Tomcat 5.0. Please help me resolve this issue: Redirection works for my non-secure websites, but it's not work properly for my secure website. My website at HTTP://dowearysoftware.com processes my jsp pages without any problems. I created a copy of the this website at www.dowearysoftware.com and added SSL with 128 bit encryption in IIS 6.0. HTTP://dowearysoftware.com processes the jsp successfully, but HTTPS://www.dowearysoftware.com hangs when I select one of the links from the index.jsp home page. The index.jsp home page displays successfully, but the browser hangs indifinitely when I select any link on the home page. Please try my secure website to see what I am talking about. I believe the problem has something to do with Tomcat 5.0. My redirection is working properly through port Connector port 8009, and IIS SSL allows me to access https://www.dowearysoftware.com using port 443. I've also updated the JSSE organizational unit, organization, city, state, name, and password using changeit in JRE. Questions: What am I missing in Tomcat set up that would cause my jsp pages not to process? Why would the index.jsp home page display over the secure channel and the subsequent jsp links not display? Do I need to modify my worker2.properties file for SSL? My worker2.properties file** #Look at #http://jakarta.apache.org/tomcat/tomcat-4.1-doc/jk2/jk2/configwebcom.html #for parameter description [shm:] info=Scoreboard. Required for reconfiguration and status with multiprocess servers file=C:\Program Files\Apache Software Foundation\Tomcat 5.0\temp\jk2.shm size=1048576 [channel.socket:localhost:8009] info=Ajp13 forwarding over socket tomcatId=localhost:8009 # Map webapps to the Web server uri space [uri:/*.jsp] [uri:/generic/*] [uri:/generic/jsp/*] ** I can tell you this...I ran a test linking index.jsp to an html page in the HTTPS://www.dowearysoftware.com website and the link worked. Linking to html pages works fine, but linking to jsp pages causes the explorer browser to hang indefinitely. Try it... you'll see what I am talking about. Please help me get over this hurdle. _ High-speed usersbe more efficient online with the new MSN Premium Internet Software. http://join.msn.com/?pgmarket=en-uspage=byoa/premST=1 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
HTTPS problem - Jsp pages no working with IIS 6.0 SSL.
My website at HTTP://dowearysoftware.com processes my jsp pages without any problems. I created a copy of the this website at www.dowearysoftware.com and added SSL with 128 bit encryption in IIS 6.0. HTTP://dowearysoftware.com processes the jsp successfully, but HTTPS://www.dowearysoftware.com hangs when I select one of the links from the index.jsp home page. The index.jsp home page displays successfully, but the browser hangs indifinitely when I select any link on the home page. Please try my secure website to see what I am talking about. I believe the problem has something to do with Tomcat 5.0. My redirection is working properly through port Connector port 8009, which has a redirectPort of 443, and IIS SSL is allows me to acces HTTPS://www.dowearysoftware.com using port 443. I've also updated the JSSE organizational unit, organization, city, state, name, and password using changeit in JRE. Questions: What am I missing in Tomcat set up that would cause my jsp pages not to process? Why would the index.jsp home page display over the secure channel and the subsequent jsp links not display? I can tell this...index.jsp is located in dowearysoftware folder within the webapps folder in tomcat 5.0. anf the rest of my jsp pages are located in the jsp folder within the dowearysoftware folder. I also ran a test linking index.jsp to an html page in the dowearysoftware folder and the link worked. Linking to html pages works fine, but linking to jsp pages causes the explorer browser to hang indefinitely. Try it... you'll see what I am talking about. Please help me get over this hurdle. Charles. _ Check out the new MSN 9 Dial-up fast reliable Internet access with prime features! http://join.msn.com/?pgmarket=en-uspage=dialup/homeST=1 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: HTTPS problem - Jsp pages no working with IIS 6.0 SSL.
What's wrong with the Content-Location: https://www.dowearysoftware.com:443/index.jsp ? What would you expect to see in a correct Content-Location? Can you give me some insight as to how I might reconfigure my IIS/jakarta-tomcat-connectors to correct this problem? I know that the Content-Length on the server certificate that I created was only 1024K, and your message below shows a Content-Length of 5575K Could this have something to do with my problem? Do I need to create a server certificate that can handle a Content-Length of 5575K? I will also change the Content-Type to Text/HTML. From: Jan-Henrik Haukeland [EMAIL PROTECTED] To: Tomcat Developers List [EMAIL PROTECTED] CC: [EMAIL PROTECTED] Subject: Re: HTTPS problem - Jsp pages no working with IIS 6.0 SSL. Date: Tue, 27 Jan 2004 14:21:28 +0100 Jan-Henrik Haukeland [EMAIL PROTECTED] writes: Connecting to www.dowearysoftware.com:443 HTTP/1.1 200 OK Content-Length: 5575 Content-Type: application/octet-stream Content-Location: https://www.dowearysoftware.com:443/index.jsp Ah, yes, as you can see the server sets the Content-Location header (i.e. redirect) wrongly in a 200 response. IE must (wrongly) follow this location leading to a indefinitely redirect loop, that's why your browser hangs. This is not a tomcat problem but a IIS/jakarta-tomcat-connectors configuration problem. -- Jan-Henrik Haukeland _ Find high-speed net deals comparison-shop your local providers here. https://broadband.msn.com - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: HTTPS problem - Jsp pages no working with IIS 6.0 SSL.
Jan-Henrik, You stated that my jsp is not compiled. I thought that .jsp pages and .java files are compiled during the ant build, ant install, ant package, and ant deploy commands? I've packaged my .war file in tomcat 5.0 and the .jsp pages work at my unsecure website, HTTP://dowearysoftware.com. What else do I need to do to insure that my .jsp pages are compiled and deployed properly? Charles From: Jan-Henrik Haukeland [EMAIL PROTECTED] To: Tomcat Developers List [EMAIL PROTECTED] CC: [EMAIL PROTECTED] Subject: Re: HTTPS problem - Jsp pages no working with IIS 6.0 SSL. Date: Tue, 27 Jan 2004 14:12:19 +0100 charles doweary [EMAIL PROTECTED] writes: My website at HTTP://dowearysoftware.com processes my jsp pages without any problems. I created a copy of the this website at www.dowearysoftware.com and added SSL with 128 bit encryption in IIS 6.0. HTTP://dowearysoftware.com processes the jsp successfully, but HTTPS://www.dowearysoftware.com hangs when I select one of the links from the index.jsp home page. The page downloads but the Content-Type is wrong (should be text/html) and the jsp is not compiled. Maybe check your configuration? Here are the headers and a bit of the content: Connecting to www.dowearysoftware.com:443 HTTP/1.1 200 OK Content-Length: 5575 Content-Type: application/octet-stream Content-Location: https://www.dowearysoftware.com:443/index.jsp Last-Modified: Tue, 27 Jan 2004 04:36:17 GMT Accept-Ranges: bytes ETag: 65c91a8fe4c31:57c1 Server: Microsoft-IIS/6.0 MicrosoftOfficeWebServer: 5.0_Pub Date: Tue, 27 Jan 2004 13:13:23 GMT Connection: close a href=TOP/a %@ page import=com.generic.customer.Customer % %@ page import=com.generic.cart.Cart % %@ page import=javax.servlet.http.Cookie % %@ page import=sun.misc.BASE64Decoder % -- Jan-Henrik Haukeland _ Check out the new MSN 9 Dial-up fast reliable Internet access with prime features! http://join.msn.com/?pgmarket=en-uspage=dialup/homeST=1 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Not Redirecting (IIS6.0 - JWSDP1.3 with Tomcat5.0).
I finally got it to work!!! After adding the .jsp extension with mime type application/octet-stream to IIS 6.0 under the web site properties, http headers tab, my jsp-exapmles were processed successfully by Tomcat 5.0. This needs to be added to all of the HOW TO documentation that out there currently. Thanks for all of your input. From: Christopher Watson [EMAIL PROTECTED] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: 'Tomcat Users List' [EMAIL PROTECTED] Subject: RE: Not Redirecting (IIS6.0 - JWSDP1.3 with Tomcat5.0). Date: Wed, 24 Dec 2003 09:18:47 - Charles I've only been able to get jk2 iis-tomcat working with a isapi_redirector2.dll version 2.0.1 which I can no longer find on jakarta.apache.org The latest seems to be 2.0.1 whichi I've never got to work. If you like I can email it to you direct outside of this list. I tried sending it direct to the list but it didn't turn up I guess .dll attachements are blocked !? Or does anyone know if the 2.0.1 version is still accessible at jakarta.apache.org - URL please ! Or anyone know of problems/fixes for 2.0.1 ?? Christopher -Original Message- From: charles doweary [mailto:[EMAIL PROTECTED] Sent: 23 December 2003 22:07 To: [EMAIL PROTECTED] Subject: RE: Not Redirecting (IIS6.0 - JWSDP1.3 with Tomcat5.0). Thanks, but that did not help. I changed the direction of the slashes in the extension_uri and got the same results...no redirection. Do you have any other ideas? Your support in this matter is greatly appreciated. From: Wendell Holmes [EMAIL PROTECTED] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: 'Tomcat Users List' [EMAIL PROTECTED] Subject: RE: Not Redirecting (IIS6.0 - JWSDP1.3 with Tomcat5.0). Date: Tue, 23 Dec 2003 11:37:36 -0700 Try changing the extension_uri to forward slashes - /jakarta/isapi_redirect.dll Wendell Holmes Sorry for not quoting, but it bounced as too large for mailserver _ Have fun customizing MSN Messenger - learn how here! http://www.msnmessenger-download.com/tracking/reach_customize - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] _ Have fun customizing MSN Messenger learn how here! http://www.msnmessenger-download.com/tracking/reach_customize - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
