Re: Setting up TLS Connection: How to read password from file

2015-07-13 Thread Felix Schumacher


Am 13. Juli 2015 10:57:13 MESZ, schrieb david.tis...@swisspost.com:
Hi, 

I'm trying to set up a tomcat 6.0.13 to use TLS connections.

This version is really ancient. You should update to a newer tomcat. 

Therefor I configure the keystorefile for my servers. 

The Problem now is: Since I have several Hardware-Stages (ET, IT, ..) I
have a pk12 keystorefiles and the corresponding password in a separate
file for each Stage. That is used to change keystores. 

Therefor the tomcat should read the password from the password file,
but I don't see any possibility to read the password from file. I can
only configure the password hard in the setup.xml.

If you have no problem to have the passwords in clear text files, you can try 
to do ant style replacement as described in 
https://tomcat.apache.org/tomcat-7.0-doc/config/.

That should work on your version, too. 

But I don't know any setup.xml. Do you mean server.xml?

Regards,
Felix 


How can I configure the setup.xml to read the password from file?


Greetings,

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Setting up TLS Connection: How to read password from file

2015-07-13 Thread david.tissen
Hi, 

I'm trying to set up a tomcat 6.0.13 to use TLS connections.
Therefor I configure the keystorefile for my servers. 

The Problem now is: Since I have several Hardware-Stages (ET, IT, ..) I have a 
pk12 keystorefiles and the corresponding password in a separate file for each 
Stage. That is used to change keystores. 

Therefor the tomcat should read the password from the password file, but I 
don't see any possibility to read the password from file. I can only configure 
the password hard in the setup.xml.

How can I configure the setup.xml to read the password from file?


Greetings,

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



Re: Setting up TLS Connection: How to read password from file

2015-07-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

David,

On 7/13/15 3:57 AM, david.tis...@swisspost.com wrote:
 Hi,
 
 I'm trying to set up a tomcat 6.0.13 to use TLS connections. 
 Therefor I configure the keystorefile for my servers.
 
 The Problem now is: Since I have several Hardware-Stages (ET, IT,
 ..) I have a pk12 keystorefiles and the corresponding password in a
 separate file for each Stage. That is used to change keystores.
 
 Therefor the tomcat should read the password from the password
 file, but I don't see any possibility to read the password from
 file. I can only configure the password hard in the setup.xml.
 
 How can I configure the setup.xml to read the password from file?

http://wiki.apache.org/tomcat/FAQ/Password

Don't worry too much about all the complaints about how you are doing
it wrong on that page. In your case, it seems like you have a
sensible use case. There are some techniques on that page to allow you
to use an on-disk file containing the password.

- -chris
-BEGIN PGP SIGNATURE-
Comment: GPGTools - http://gpgtools.org

iQIcBAEBCAAGBQJVo9Z9AAoJEBzwKT+lPKRY2XUP/0ovvFPkTG2hilYXJFpqWaqD
9igcm5FRU0oPrgKHla53jew5sbee/sVenNsKRAPgd/iYQqgCxiq/J8F/rVtdwV0n
yWsTSKAU9kUZOJgM3PPJU0aPq+v2h6k9Y99OM5i7pGd8vI0Q6cjcPcYIQRufNXJ0
fvbeI/F50ckW9WfFWVizsT1wZ3bYonmOi02ZhRA4Sbx6PjjXCH0c72FfbxdGJKbI
Acx+2SmMykarhHorEc8YrJJfvyb82+QieVgk44DaPQagB+2rujtXTy8kMTwfX6CX
/xSaXYs8MazyBK+oFVdXUw6gSaUidw2zA7kqTXyoZU7JPEm5qMjQrbnzpi0/jiNx
W7NIQyMODGVK638UQHVLv8u1UsI7FCEsPoSArY/2Dr/NBANILKuZ1LHDgrhzZImN
iDuHrSH6bZL3SIqJZBjS7SfQqDuhlgd9gogkgAlfCvohMnA6YlPqGBoCVKuQPs20
YYWSVXvf4rVEuSNtcCstJe/mRVERCeLJaJlRjYbrXSOE1aHpmL/JziB55Ys31J3r
B6fAZj8qyQuFv2BpqgEKinHPrWZjUb47aEiqMtWfsuRzQk9Pnxsm8mevNMl5hsJM
poXEZ2Qu47aASNaFZnZQN7Q/837D+hAwYiYqz9c9q5VrI2lGqYY5xJG6l/P9WPcj
0ujfawxitjh9sUpOUjgm
=afW+
-END PGP SIGNATURE-

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org