Re: Need to Specify keystorePass on Command Line

2013-02-12 Thread André Warnier
Harris, Jeffrey E. wrote: All, I understand that there is no good, secure solution. However, my hands are tied on this matter, and I would appreciate if you would focus on providing technical assistance in implementing a solution within the constraints I have been given. Jeffrey, We all

Re: Need to Specify keystorePass on Command Line - Update

2013-02-12 Thread Mark Thomas
On 12/02/2013 00:53, Harris, Jeffrey E. wrote: Current status: I replaced keystorePass=password with 'keystorePass=${kspassword}' in server.xml, and executed the command tomcat7 //TS//Tomcat7 --JvmOptions=-Dkspassword=password and have been able to start the SSL listener as a console

RE: Need to Specify keystorePass on Command Line

2013-02-12 Thread Harris, Jeffrey E.
-Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Tuesday, February 12, 2013 3:47 AM To: Tomcat Users List Subject: Re: Need to Specify keystorePass on Command Line Harris, Jeffrey E. wrote: All, I understand that there is no good, secure solution

Re: Need to Specify keystorePass on Command Line

2013-02-12 Thread André Warnier
Harris, Jeffrey E. wrote: -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Tuesday, February 12, 2013 3:47 AM To: Tomcat Users List Subject: Re: Need to Specify keystorePass on Command Line Harris, Jeffrey E. wrote: All, I understand that there is no good

Re: Need to Specify keystorePass on Command Line

2013-02-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jeffrey, On 2/12/13 9:40 AM, Harris, Jeffrey E. wrote: Tomcat will host a web-app that will connect as a proxy to another organization's system to retrieve data that we will use in our applications. It is the other organization that is

Re: Need to Specify keystorePass on Command Line - Update

2013-02-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 2/12/13 4:27 AM, Mark Thomas wrote: On 12/02/2013 00:53, Harris, Jeffrey E. wrote: Current status: I replaced keystorePass=password with 'keystorePass=${kspassword}' in server.xml, and executed the command tomcat7 //TS//Tomcat7

RE: Need to Specify keystorePass on Command Line - Update

2013-02-12 Thread Harris, Jeffrey E.
-Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Tuesday, February 12, 2013 6:00 PM To: Tomcat Users List Subject: Re: Need to Specify keystorePass on Command Line - Update -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 2/12

RE: Need to Specify keystorePass on Command Line - Update

2013-02-12 Thread Jeffrey Janner
-Original Message- From: Harris, Jeffrey E. [mailto:jeffrey.har...@mantech.com] Sent: Tuesday, February 12, 2013 5:35 PM To: Tomcat Users List Subject: RE: Need to Specify keystorePass on Command Line - Update -Original Message- From: Christopher Schultz [mailto:ch

RE: Need to Specify keystorePass on Command Line - Update

2013-02-12 Thread Harris, Jeffrey E.
If you had read the Procrun documentation that Mark was kind enough to point you to above, you might have figured out that you need to modify your --JvmOptions=... syntax. You need to change it to ++JvmOptions=... otherwise, you are overwriting all the other options that that are stored

RE: Need to Specify keystorePass on Command Line

2013-02-11 Thread Harris, Jeffrey E.
-Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Saturday, February 09, 2013 8:29 AM To: Tomcat Users List Subject: Re: Need to Specify keystorePass on Command Line -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jeffrey, On 2/8/13 5:03

RE: Need to Specify keystorePass on Command Line - Update

2013-02-11 Thread Harris, Jeffrey E.
Current status: I replaced keystorePass=password with 'keystorePass=${kspassword}' in server.xml, and executed the command tomcat7 //TS//Tomcat7 --JvmOptions=-Dkspassword=password and have been able to start the SSL listener as a console application. However, I have not been able to do the

Re: Need to Specify keystorePass on Command Line

2013-02-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jeffrey, On 2/8/13 5:03 PM, Harris, Jeffrey E. wrote: For our implementation, it does not matter whether another process can read the startup parameters - as long as the password is not stored in a file and disappears when the Tomcat's host

Need to Specify keystorePass on Command Line

2013-02-08 Thread Harris, Jeffrey E.
I am running Tomcat 7.0.35 on Windows Server 2003 SP2, x32. I have SSL configured, and if add the keystorePass parameter to server.xml, SSL starts correctly. However, for security reasons, I must specify the keystore password on the command line. I have searched and the only possible way to

RE: Need to Specify keystorePass on Command Line

2013-02-08 Thread Caldarale, Charles R
From: Harris, Jeffrey E. [mailto:jeffrey.har...@mantech.com] Subject: Need to Specify keystorePass on Command Line However, for security reasons, I must specify the keystore password on the command line. Before making your own life unnecessarily complicated, read this: http

RE: Need to Specify keystorePass on Command Line

2013-02-08 Thread Harris, Jeffrey E.
-Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Friday, February 08, 2013 9:24 AM To: Tomcat Users List Subject: RE: Need to Specify keystorePass on Command Line From: Harris, Jeffrey E. [mailto:jeffrey.har...@mantech.com] Subject: Need

RE: Need to Specify keystorePass on Command Line

2013-02-08 Thread Caldarale, Charles R
From: Harris, Jeffrey E. [mailto:jeffrey.har...@mantech.com] Subject: RE: Need to Specify keystorePass on Command Line First, I cannot store the password ANYWHERE on the system, which is why it needs to be entered on the command line. Then you can't run Tomcat as a service

Re: Need to Specify keystorePass on Command Line

2013-02-08 Thread Pid
On 08/02/2013 16:11, Caldarale, Charles R wrote: From: Harris, Jeffrey E. [mailto:jeffrey.har...@mantech.com] Subject: RE: Need to Specify keystorePass on Command Line First, I cannot store the password ANYWHERE on the system, which is why it needs to be entered on the command line

RE: Need to Specify keystorePass on Command Line

2013-02-08 Thread Harris, Jeffrey E.
-Original Message- From: Pid [mailto:p...@pidster.com] Sent: Friday, February 08, 2013 4:48 PM To: Tomcat Users List Subject: Re: Need to Specify keystorePass on Command Line On 08/02/2013 16:11, Caldarale, Charles R wrote: From: Harris, Jeffrey E. [mailto:jeffrey.har

Re: Need to Specify keystorePass on Command Line

2013-02-08 Thread André Warnier
Harris, Jeffrey E. wrote: For our implementation, it does not matter whether another process can read the startup parameters - as long as the password is not stored in a file and disappears when the Tomcat's host server is shutdown. I have a suggestion then : the password should be typed

RE: Need to Specify keystorePass on Command Line

2013-02-08 Thread Harris, Jeffrey E.
-Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Friday, February 08, 2013 5:43 PM To: Tomcat Users List Subject: Re: Need to Specify keystorePass on Command Line Harris, Jeffrey E. wrote: For our implementation, it does not matter whether another

RE: Need to Specify keystorePass on Command Line

2013-02-08 Thread Caldarale, Charles R
From: Harris, Jeffrey E. [mailto:jeffrey.har...@mantech.com] Subject: RE: Need to Specify keystorePass on Command Line I have a suggestion then : the password should be typed and stored in a file mapped into RAM. As long as the system is on, Tomcat can read it, and you can stop

RE: Need to Specify keystorePass on Command Line

2013-02-08 Thread Harris, Jeffrey E.
-Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Friday, February 08, 2013 7:56 PM To: Tomcat Users List Subject: RE: Need to Specify keystorePass on Command Line From: Harris, Jeffrey E. [mailto:jeffrey.har...@mantech.com] Subject: RE