Re: Using existing pki certificates to enable SSL on tomcat 9

2018-12-17 Thread Christopher Schultz
in using that > existing certificate to enable SSL on Tomcat. http://tomcat.apache.org/tomcat-9.0-doc/ssl-howto.html#Importing_the_Cer tificate - -chris -BEGIN PGP SIGNATURE- Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlw

Using existing pki certificates to enable SSL on tomcat 9

2018-12-16 Thread Sam G
Hi, I've installed Apache Tomcat 9 on windows 2016 64bit server. Our SA has requested a PKI certificate for the windows server feom our CA and got one. I need help with steps involved in using that existing certificate to enable SSL on Tomcat. Thank you Sam

AW: [bulk] Re: SSL on Tomcat

2018-10-02 Thread Mario Schmitz
Betreff: [bulk] Re: SSL on Tomcat Thanks Chris, Luis On Tue, Oct 2, 2018 at 10:00 AM Luis Rodríguez Fernández wrote: > Hello Christopher, > > It makes sense, thank you very much for your advice! > > Cheers, > > Luis > > El lun., 1 oct. 2018 a las 20:39,

Re: SSL on Tomcat

2018-10-02 Thread Loai Abdallatif
Thanks Chris, Luis On Tue, Oct 2, 2018 at 10:00 AM Luis Rodríguez Fernández wrote: > Hello Christopher, > > It makes sense, thank you very much for your advice! > > Cheers, > > Luis > > El lun., 1 oct. 2018 a las 20:39, Christopher Schultz (< > ch...@christopherschultz.net>) escribió: > > >

Re: SSL on Tomcat

2018-10-02 Thread Luis Rodríguez Fernández
Hello Christopher, It makes sense, thank you very much for your advice! Cheers, Luis El lun., 1 oct. 2018 a las 20:39, Christopher Schultz (< ch...@christopherschultz.net>) escribió: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Luis, > > On 10/1/18 11:06 AM, Luis Rodríguez Fernández

Re: SSL on Tomcat

2018-10-01 Thread Loai Abdallatif
thanks very much , I did it and it works On Mon, Oct 1, 2018 at 6:07 PM Luis Rodríguez Fernández wrote: > Hello Loai, > > Agree with Christopher, you have to fix your client. Just get the root > Certificate Authority public key and import it in your client truststore. > If you did not change it

Re: SSL on Tomcat

2018-10-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Luis, On 10/1/18 11:06 AM, Luis Rodríguez Fernández wrote: > Agree with Christopher, you have to fix your client. Just get the > root Certificate Authority public key and import it in your client > truststore. I'd recommend trusting the finest-grai

Re: SSL on Tomcat

2018-10-01 Thread Luis Rodríguez Fernández
Hello Loai, Agree with Christopher, you have to fix your client. Just get the root Certificate Authority public key and import it in your client truststore. If you did not change it the client (java) the default keystore is located in $JAVA_HOME/jre/lib/security/cacerts. Something like: keytool

Re: SSL on Tomcat

2018-09-29 Thread Loai Abdallatif
Thanks Chris, but how to do it, should I copy the ssl certificate from Webserver 192.168.1.120 to my tomcat container (worker0) in 192.168.1.111 in server.xml . any idea please On Sat, Sep 29, 2018 at 1:35 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSA

Re: SSL on Tomcat

2018-09-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Loai, On 9/27/18 10:50, Loai Abdallatif wrote: > Hello, > > I have Set Apache Load Balancer ( ModJK) with Server IP > 192.168.1.120 (Webserver01.epsilon.test) which forward the traffic > to tomcat server .(192.168.1.111 (appserver01.epsilon.test)

Re: SSL on Tomcat

2018-09-28 Thread Loai Abdallatif
r add exceptions to the local trust store in case > of self-signed certificates. > > Guido > > > >-Original Message- > >From: Loai Abdallatif [mailto:loai.abdalla...@gmail.com] > >Sent: Thursday, September 27, 2018 4:52 PM > >To: Tomcat Users List

RE: SSL on Tomcat

2018-09-28 Thread Jäkel , Guido
andline tool to check the verification chain and/or add exceptions to the local trust store in case of self-signed certificates. Guido >-Original Message- >From: Loai Abdallatif [mailto:loai.abdalla...@gmail.com] >Sent: Thursday, September 27, 2018 4:52 PM >To: Tomcat Us

Re: SSL on Tomcat

2018-09-27 Thread Loai Abdallatif
hello, shall I add the certificate to server.xml on tomcat server or just on Webserver On Thu, Sep 27, 2018 at 5:50 PM, Loai Abdallatif wrote: > Hello, > > I have Set Apache Load Balancer ( ModJK) with Server IP 192.168.1.120 > (Webserver01.epsilon.test) which forward the traffic to tomcat serv

SSL on Tomcat

2018-09-27 Thread Loai Abdallatif
Hello, I have Set Apache Load Balancer ( ModJK) with Server IP 192.168.1.120 (Webserver01.epsilon.test) which forward the traffic to tomcat server .(192.168.1.111 (appserver01.epsilon.test) each tomcat server has three workers ( 0,1,2) I deployed *Central Authentication Service* (CAS) on Worke

Re: Need help setting up SSL on Tomcat 8

2016-07-18 Thread Sean Son
On Mon, Jul 18, 2016 at 10:47 AM, André Warnier (tomcat) wrote: > On 18.07.2016 16:33, Sean Son wrote: > >> On Thu, Jul 14, 2016 at 8:15 AM, Ognjen Blagojevic < >> ognjen.d.blagoje...@gmail.com> wrote: >> >> Sean, >>> >>> On 13.7.2016 21:56, Sean Son wrote: >>> >>> Thank you for your answer guys.

Re: Need help setting up SSL on Tomcat 8

2016-07-18 Thread tomcat
On 18.07.2016 16:33, Sean Son wrote: On Thu, Jul 14, 2016 at 8:15 AM, Ognjen Blagojevic < ognjen.d.blagoje...@gmail.com> wrote: Sean, On 13.7.2016 21:56, Sean Son wrote: Thank you for your answer guys. Is there anywhere in the Tomcat config files that I would need to specify the DNS name? L

Re: Need help setting up SSL on Tomcat 8

2016-07-18 Thread Sean Son
On Thu, Jul 14, 2016 at 8:15 AM, Ognjen Blagojevic < ognjen.d.blagoje...@gmail.com> wrote: > Sean, > > On 13.7.2016 21:56, Sean Son wrote: > >> Thank you for your answer guys. Is there anywhere in the Tomcat config >> files that I would need to specify the DNS name? Like in Apache we >> would spe

Re: Need help setting up SSL on Tomcat 8

2016-07-14 Thread Sean Son
On Thu, Jul 14, 2016 at 8:15 AM, Ognjen Blagojevic < ognjen.d.blagoje...@gmail.com> wrote: > Sean, > > On 13.7.2016 21:56, Sean Son wrote: > >> Thank you for your answer guys. Is there anywhere in the Tomcat config >> files that I would need to specify the DNS name? Like in Apache we >> would spe

Re: Need help setting up SSL on Tomcat 8

2016-07-14 Thread Ognjen Blagojevic
Sean, On 13.7.2016 21:56, Sean Son wrote: Thank you for your answer guys. Is there anywhere in the Tomcat config files that I would need to specify the DNS name? Like in Apache we would specify the DNS name in a Virtualhost. Take a look at context xml, attribute "name" in Host element [1], an

Re: Need help setting up SSL on Tomcat 8

2016-07-13 Thread Daniel Savard
2016-07-13 15:56 GMT-04:00 Sean Son : > Thank you for your answer guys. Is there anywhere in the Tomcat config > files that I would need to specify the DNS name? Like in Apache we would > specify the DNS name in a Virtualhost. > > No. - Daniel Savard

Re: Need help setting up SSL on Tomcat 8

2016-07-13 Thread Sean Son
Thank you for your answer guys. Is there anywhere in the Tomcat config files that I would need to specify the DNS name? Like in Apache we would specify the DNS name in a Virtualhost. On Wed, Jul 13, 2016 at 7:56 AM, Ognjen Blagojevic < ognjen.d.blagoje...@gmail.com> wrote: > Sean, > > On 12.7.20

Re: Need help setting up SSL on Tomcat 8

2016-07-13 Thread Ognjen Blagojevic
Sean, On 12.7.2016 14:49, Sean Son wrote: Hello thank you for your response. I am currently only accessing the server using IP address only. We do not have a DNS record set up for the server as of yet. It will be something like webapp.example.com Once there is a DNS record in place, and you ac

Re: Need help setting up SSL on Tomcat 8

2016-07-12 Thread Daniel Savard
2016-07-12 14:34 GMT-04:00 Sean Son : > Are there any logs on the tomcat server that I should check in order to fix > this SSL issue? or is this strictly a certificate related issue? > At my opinion, it is a DNS issue. Your certificate specify the SubjectAlternativeName field with two DNS entries

Re: Need help setting up SSL on Tomcat 8

2016-07-12 Thread Sean Son
On Tue, Jul 12, 2016 at 8:49 AM, Sean Son wrote: > > > On Mon, Jul 11, 2016 at 6:25 PM, Ognjen Blagojevic < > ognjen.d.blagoje...@gmail.com> wrote: > >> On 11.7.2016 16:29, Sean Son wrote: >> >>> Here is the certificate path: >>> >>> - Go Daddy Root Certificate Authority - G2 >>>- Go Daddy Se

Re: Need help setting up SSL on Tomcat 8

2016-07-12 Thread Sean Son
On Mon, Jul 11, 2016 at 6:25 PM, Ognjen Blagojevic < ognjen.d.blagoje...@gmail.com> wrote: > On 11.7.2016 16:29, Sean Son wrote: > >> Here is the certificate path: >> >> - Go Daddy Root Certificate Authority - G2 >>- Go Daddy Secure Certificate Authority - G2 >> - *.example.com

Re: Need help setting up SSL on Tomcat 8

2016-07-11 Thread Ognjen Blagojevic
On 11.7.2016 16:29, Sean Son wrote: Here is the certificate path: - Go Daddy Root Certificate Authority - G2 - Go Daddy Secure Certificate Authority - G2 - *.example.com That looks Ok. Did you, perhaps, tried to access server on subdomain of example.com? Wildca

Re: Need help setting up SSL on Tomcat 8

2016-07-11 Thread Sean Son
Here is the certificate path: - Go Daddy Root Certificate Authority - G2 - Go Daddy Secure Certificate Authority - G2 - *.example.com Thanks On Fri, Jul 8, 2016 at 6:23 PM, Ognjen Blagojevic < ognjen.d.blagoje...@gmail.com> wrote: > On 7.7.2016 23:17, Daniel Savard wrote: > >> Certifi

Re: Need help setting up SSL on Tomcat 8

2016-07-08 Thread Ognjen Blagojevic
On 7.7.2016 23:17, Daniel Savard wrote: Certificate Error There are issues with the site's certificate chain (net::ERR_CERT_COMMON_NAME_INVALID). Looks like adding the keyAlias to the connector did not fix anything unfortunately. Did you examined the received certificate in the browser. Us

Re: Need help setting up SSL on Tomcat 8

2016-07-07 Thread Daniel Savard
2016-07-07 14:53 GMT-04:00 Sean Son : > > > On Thu, Jul 7, 2016 at 12:24 PM, Sean Son < > linuxmailinglistsem...@gmail.com> wrote: > >> Copying Daniel and Ognjen on this >> >> On Thu, Jul 7, 2016 at 12:02 PM, Sean Son < >> linuxmailinglistsem...@gmail.com> wrote: >> >>> Hello >>> >>> I tried addi

Re: Need help setting up SSL on Tomcat 8

2016-07-07 Thread Sean Son
On Thu, Jul 7, 2016 at 12:24 PM, Sean Son wrote: > Copying Daniel and Ognjen on this > > On Thu, Jul 7, 2016 at 12:02 PM, Sean Son < > linuxmailinglistsem...@gmail.com> wrote: > >> Hello >> >> I tried adding the keyAlias to the connector and when i restarted >> Tomcat, and i browsed to the sever

Re: Need help setting up SSL on Tomcat 8

2016-07-07 Thread Sean Son
Copying Daniel and Ognjen on this On Thu, Jul 7, 2016 at 12:02 PM, Sean Son wrote: > Hello > > I tried adding the keyAlias to the connector and when i restarted Tomcat, > and i browsed to the sever page, I got this error: > > Certificate Error > There are issues with the site's certificate chai

Re: Need help setting up SSL on Tomcat 8

2016-07-07 Thread Sean Son
Hello I tried adding the keyAlias to the connector and when i restarted Tomcat, and i browsed to the sever page, I got this error: Certificate Error There are issues with the site's certificate chain (net::ERR_CERT_COMMON_NAME_INVALID). Looks like adding the keyAlias to the connector did not fi

Re: Need help setting up SSL on Tomcat 8

2016-07-07 Thread Daniel Savard
2016-07-07 10:52 GMT-04:00 Sean Son : > So I should modify my connector to look like this? > > protocol="org.apache.coyote.http11.Http11NioProtocol" >maxThreads="150" keystoreFile="conf/tomcat.jks" > keystorePass="password" keyAlias="{b81d8607-57e9-4c35-a058-cd46099e7797}" > SSLE

Re: Need help setting up SSL on Tomcat 8

2016-07-07 Thread Sean Son
So I should modify my connector to look like this? On Wed, Jul 6, 2016 at 6:50 AM, Ognjen Blagojevic < ognjen.d.blagoje...@gmail.com> wrote: > Sean, > > On 5.7.2016 17:14, Sean Son wrote: > >> Hello Daniel and all >> >> Here is the output.. the full output >> >> http://pastebin.com/AQckw6ig >>

Re: Need help setting up SSL on Tomcat 8

2016-07-06 Thread Ognjen Blagojevic
Sean, On 5.7.2016 17:14, Sean Son wrote: Hello Daniel and all Here is the output.. the full output http://pastebin.com/AQckw6ig Keytool output indicates that there are two entries in keystore: 1. Entry with alias "root", created Jun 16, 2016, which is intermediate certificate for Go Daddy:

Re: Need help setting up SSL on Tomcat 8

2016-07-05 Thread Sean Son
On Fri, Jul 1, 2016 at 6:14 PM, Daniel Savard wrote: > 2016-07-01 16:08 GMT-04:00 Christopher Schultz < > ch...@christopherschultz.net > >: > > > > > > > > > Thank you for the reply. How would I go about specifying the alias > > > of the certificate? > > > > You may have to re-import it, but I'v

Re: Need help setting up SSL on Tomcat 8

2016-07-01 Thread Daniel Savard
2016-07-01 16:08 GMT-04:00 Christopher Schultz : > > > > > Thank you for the reply. How would I go about specifying the alias > > of the certificate? > > You may have to re-import it, but I've had bad experiences with Java > keystores so ALWAYS keep a backup in case you host something. > > The fi

Re: Need help setting up SSL on Tomcat 8

2016-07-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sean, On 7/1/16 11:11 AM, Sean Son wrote: > On Fri, Jul 1, 2016 at 2:57 AM, Daniel Savard > wrote: > >> 2016-06-29 9:08 GMT-04:00 Sean Son >> : >> >>> Hello Daniel >>> >>> Thank you for the information. Here is the output of the >>> keytool comm

Re: Need help setting up SSL on Tomcat 8

2016-07-01 Thread Sean Son
On Fri, Jul 1, 2016 at 2:57 AM, Daniel Savard wrote: > 2016-06-29 9:08 GMT-04:00 Sean Son : > > > Hello Daniel > > > > Thank you for the information. Here is the output of the keytool command: > > > > Keystore type: JKS > > Keystore provider: SUN > > > > Your keystore contains 2 entries > > > > r

Re: Need help setting up SSL on Tomcat 8

2016-06-30 Thread Daniel Savard
2016-06-29 9:08 GMT-04:00 Sean Son : > Hello Daniel > > Thank you for the information. Here is the output of the keytool command: > > Keystore type: JKS > Keystore provider: SUN > > Your keystore contains 2 entries > > root, Jun 16, 2016, trustedCertEntry, > Certificate fingerprint (SHA1): > 27:AC

Re: Need help setting up SSL on Tomcat 8

2016-06-30 Thread Philip Hachey
On 16-06-29 09:08 AM, Sean Son wrote: Hello Daniel Thank you for the information. Here is the output of the keytool command: Keystore type: JKS Keystore provider: SUN Your keystore contains 2 entries root, Jun 16, 2016, trustedCertEntry, Certificate fingerprint (SHA1): 27:AC:93:69:FA:F2:52:

Re: Need help setting up SSL on Tomcat 8

2016-06-29 Thread Sean Son
Hello Daniel Thank you for the information. Here is the output of the keytool command: Keystore type: JKS Keystore provider: SUN Your keystore contains 2 entries root, Jun 16, 2016, trustedCertEntry, Certificate fingerprint (SHA1): 27:AC:93:69:FA:F2:52:07:BB:26:27:CE:FA:CC:BE:4E:F9:C3:19:B8 {b8

Re: Need help setting up SSL on Tomcat 8

2016-06-28 Thread Daniel Savard
2016-06-28 16:24 GMT-04:00 Sean Son : > > as for the output to the keytool command: > > Isnt the output to that command, confidential information? > > No, there isn't anything confidential from the output of a simple -list. It doesn't display the private key or anything like that. It will just s

Re: Need help setting up SSL on Tomcat 8

2016-06-28 Thread Sean Son
Here is the complete configuration as for the output to the keytool command: Isnt the output to that command, confidential information? Thanks On Tue, Jun 28, 2016 at 4:06 PM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESS

Re: Need help setting up SSL on Tomcat 8

2016-06-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sean, On 6/28/16 2:31 PM, Sean Son wrote: > Hey Philip > > So i was able to get the page to connect with SSL but I noticed > that when I clicked on the little icon that looks like a lock next > to https:// in the address bar, I saw this certificate

Re: Need help setting up SSL on Tomcat 8

2016-06-28 Thread Sean Son
Hey Philip So i was able to get the page to connect with SSL but I noticed that when I clicked on the little icon that looks like a lock next to https:// in the address bar, I saw this certificate error: Certificate Error There are issues with the site's certificate chain (net::ERR_CERT_COMMON_NAM

Re: Need help setting up SSL on Tomcat 8

2016-06-28 Thread Sean Son
Thank you for your reply Philip yes I have and it still failed.. I can try again and let you know what errors I am running into. Thanks! On Tue, Jun 28, 2016 at 2:15 PM, Philip Hachey wrote: > Have you tried following the steps found here?: > https://tomcat.apache.org/tomcat-8.0-doc/ssl-howt

Re: Need help setting up SSL on Tomcat 8

2016-06-28 Thread Philip Hachey
Have you tried following the steps found here?: https://tomcat.apache.org/tomcat-8.0-doc/ssl-howto.html - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Need help setting up SSL on Tomcat 8

2016-06-28 Thread Sean Son
Hello all I am stuck trying to set up SSL on Tomcat 8. I have tried all sorts of advice and still I cannot get it to work. I attempted to use the method describe on this website: https://sysengineers.wordpress.com/2011/03/16/tomcat-automatic-redirect-https/ but I started to see the following

Re: SSL on Tomcat 6

2015-06-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Adriano, On 6/11/15 3:54 PM, Adriano Matos Meier wrote: > Exactly! > > When I run "keytool -list ...", the PrivateKeyEntry now has the > fingerprint for SSL certificate. > > I belived that I had lost private key, and I would have to do it > all a

Re: SSL on Tomcat 6

2015-06-11 Thread Adriano Matos Meier
Exactly! When I run "keytool -list ...", the PrivateKeyEntry now has the fingerprint for SSL certificate. I belived that I had lost private key, and I would have to do it all again (keystore/CSR/intermed/SSL). I still import the SSL certificate with alias tomcat, and it appears in keytool as a t

Re: SSL on Tomcat 6

2015-06-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Adriano, On 6/11/15 2:31 PM, Adriano Matos Meier wrote: > I had success when I re-import SSL certificate using same name > alias of PrivateKeyEntry and name alias used when I generate CSR > (repository). That was going to be my second suggestion.

Re: SSL on Tomcat 6

2015-06-11 Thread Adriano Matos Meier
Chris. I had success when I re-import SSL certificate using same name alias of PrivateKeyEntry and name alias used when I generate CSR (repository). It's ok now! Thank you very much!!! Adriano Em Qui, 2015-06-11 às 09:59 -0400, Christopher Schultz escreveu: > Adriano, > > On 6/11/15 9:45 AM,

Re: SSL on Tomcat 6

2015-06-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Adriano, On 6/11/15 9:45 AM, Adriano Matos Meier wrote: >>> I tried to add keyAlias="server" in my server.xml, but I >>> received this error: >> >> What does "keytool -list" show for that keystore? > > It returns 3 entries: > > 1 PrivateKeyEntry

Re: SSL on Tomcat 6

2015-06-11 Thread Adriano Matos Meier
Hi Chris. It returns 3 entries: 1 PrivateKeyEntry (Private Key) - alias repository 1 trustedCertEntry (Intermediate certificate) - alias intermed 1 trustedCertEntry (SSL certificate) - alias server Thanks for your attention! Adriano Em Qui, 2015-06-11 às 09:35 -0400, Christopher Schultz escr

Re: SSL on Tomcat 6

2015-06-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Adriano, On 6/11/15 7:18 AM, Adriano Matos Meier wrote: > I need update the SSL certificate in Tomcat 6.x. > > First I did: > > 1) Generate keystore keytool -genkeypair -alias repository -keyalg > RSA -keysize 2048 -sigalg SHA256withRSA -keystore

SSL on Tomcat 6

2015-06-11 Thread Adriano Matos Meier
Hi. I need update the SSL certificate in Tomcat 6.x. First I did: 1) Generate keystore keytool -genkeypair -alias repository -keyalg RSA -keysize 2048 -sigalg SHA256withRSA -keystore /usr/local/tomcat6/keystore/keystore2015.jks 2) Generate CSR keytool -certreq -alias repository -keyalg RSA -key

Re: ssl on tomcat

2013-12-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Randeep, On 12/4/13, 1:30 PM, Randeep wrote: > Chris, Yes. I have so many http links as some of our old submitted > apps used non secured http links. as the apps are in use we cannot > change it. I cannot use any redirect rules to convert all the h

Re: ssl on tomcat

2013-12-05 Thread André Warnier
Please do not top-post. It is annoying when someone is trying to figure out what you are talking about. Randeep wrote: Chris, Yes. I have so many http links as some of our old submitted apps used non secured http links. as the apps are in use we cannot change it. I cannot use any redirect rules

Re: ssl on tomcat

2013-12-04 Thread Randeep
Chris, Yes. I have so many http links as some of our old submitted apps used non secured http links. as the apps are in use we cannot change it. I cannot use any redirect rules to convert all the http to https because of that. We use struts for framework. And normal jsp pages. I'm not a developer

Re: ssl on tomcat

2013-12-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Randeep, On 12/4/13, 12:22 PM, Randeep wrote: > I'm using apacche 2.2 as front end and apache tomcat 6.0.37 as > backend. I'm using mod_jk for connecting them. > > The problem is. I'm using ssl certificates. I'v configured ssl on > apache. when I c

ssl on tomcat

2013-12-04 Thread Randeep
hi, I'm using apacche 2.2 as front end and apache tomcat 6.0.37 as backend. I'm using mod_jk for connecting them. The problem is. I'm using ssl certificates. I'v configured ssl on apache. when I connect the site with https. it works. but when I click on an link it goes. I mean its not secure bro

Re: How to Enable SSL on Tomcat 7 on Linux & Test using curl?

2012-12-18 Thread Ognjen Blagojevic
Chris, On 18.12.2012 20:44, Christopher Schultz wrote: If you are using curl just to check the certificate or test HTTPS, it is easier and faster to do that with your favorite web browser. Better yet, use sslscan. Nice tool, thank you for the tip. You seem to be confused by the fact that

Re: How to Enable SSL on Tomcat 7 on Linux & Test using curl?

2012-12-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Ognjen, On 12/18/12 5:05 AM, Ognjen Blagojevic wrote: > James, > > On 18.12.2012 3:03, James Dekker wrote: >> Dec 17, 2012 5:43:08 PM org.apache.coyote.AbstractProtocol start >> INFO: Starting ProtocolHandler ["http-bio-8443"] Dec 17, 2012 >> 5:43

Re: How to Enable SSL on Tomcat 7 on Linux & Test using curl?

2012-12-18 Thread Josh Gooding
I just did this. I have the tomcat manager application running across SSL. Here's what I did On Mon, Dec 17, 2012 at 9:03 PM, James Dekker wrote: > James said... "STUFF": > > (1) cd $CATALINA_HOME/conf > > (2) Create a certificate and store it in a new key store. > > keytool -genkey -alias

Re: How to Enable SSL on Tomcat 7 on Linux & Test using curl?

2012-12-18 Thread Ognjen Blagojevic
James, On 18.12.2012 3:03, James Dekker wrote: Dec 17, 2012 5:43:08 PM org.apache.coyote.AbstractProtocol start INFO: Starting ProtocolHandler ["http-bio-8443"] Dec 17, 2012 5:43:08 PM org.apache.coyote.AbstractP INFO: Server startup in 9611 ms You successfully configured a

Re: How to Enable SSL on Tomcat 7 on Linux & Test using curl?

2012-12-17 Thread James Dekker
e this in: >> >>curl -X GET https://localhost:8443 >> >> I get the following error output: >> >> curl: (60) Peer certificate cannot be authenticated with known CA >> certificates >> More details here: http://curl.haxx.se/docs/sslcerts.html >&

Re: How to Enable SSL on Tomcat 7 on Linux & Test using curl?

2012-12-17 Thread Han Ming Low
e, you can specify an alternate file > using the --cacert option. > If this HTTPS server uses a certificate signed by a CA represented in > the bundle, the certificate verification probably failed due to a > problem with the certificate (it might be expired, or the name might > not

Re: How to Enable SSL on Tomcat 7 on Linux & Test using curl?

2012-12-17 Thread Johanes Soetanto
performs SSL certificate verification by default, using a "bundle" > of Certificate Authority (CA) public keys (CA certs). If the default > bundle file isn't adequate, you can specify an alternate file > using the --cacert option. > If this HTTPS server uses a certificate s

How to Enable SSL on Tomcat 7 on Linux & Test using curl?

2012-12-17 Thread James Dekker
icate verification probably failed due to a problem with the certificate (it might be expired, or the name might not match the domain name in the URL). If you'd like to turn off curl's verification of the certificate, use the -k (or --insecure) option. Am I missing a step here? I just wan

Re: Enabling SSL on Tomcat 6

2011-01-18 Thread Konstantin Kolinko
2011/1/18 Suneet Shah : > WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property > 'SSLEngine' to 'on' did not find a matching property. There are two implementations of SSL available in Tomcat. One is implemented using Java cryptography API. Another uses native libraries.

Re: Enabling SSL on Tomcat 6

2011-01-18 Thread amcereijo cereijo
hink you must put password for "tomcatks" Regards, Ángel. 2011/1/18 Suneet Shah > Hello, > > I am trying to enable SSL on Tomcat 6 without any luck. I am using a self > signed cert. I have placed my entries in the server.xml file below. > > Any thoughts on what I am d

Enabling SSL on Tomcat 6

2011-01-17 Thread Suneet Shah
Hello, I am trying to enable SSL on Tomcat 6 without any luck. I am using a self signed cert. I have placed my entries in the server.xml file below. Any thoughts on what I am doing wrong? I also pasted below the steps that I used to generate the cert. WARNING: [SetAllPropertiesRule

RE: Configuring SSL on Tomcat 5.5.28

2010-03-08 Thread Caldarale, Charles R
> From: CBy [mailto:tom...@byrman.demon.nl] > Subject: Re: Configuring SSL on Tomcat 5.5.28 > > On 8-3-2010 20:40, Jessica Krosschell wrote: > > I was able to create one using the keytool utilities with a > > keystore, but it has already expired (it's been

Re: Configuring SSL on Tomcat 5.5.28

2010-03-08 Thread CBy
On 8-3-2010 20:40, Jessica Krosschell wrote: Good afternoon, I am implementing SSL on Tomcat 5.5.28 (on a Windows Server 2008 box) for the first time as part of a BusinessObjects implementation. My client wants to use a self signed certificate and I was able to create one using the keytool

Re: SSL on TOMCAT with keytool

2008-09-20 Thread Matt Shields
s message in context: http://www.nabble.com/SSL-on-TOMCAT-with-keytool-tp19187386p19592073.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To start a new topic, e-mail: users@tomcat.apache.org To unsubsc

Re: SSL on TOMCAT with keytool

2008-08-28 Thread Alexey Eronko
The point was that keytool can't import existing private key. If you need to build keystore from existed cert + prv key you need to do this by external java(or smt) program. Key and Cer must be in der format. Example is here : http://www.agentbob.info/agentbob/79-AB.html Alex 2008/8/28 A

Re: SSL on TOMCAT with keytool

2008-08-27 Thread Alex Mestiashvili
Alexey Eronko wrote: Hello Guys! Don't beat me because I found so much docs about ssl and keystore but I can't get it working with together. I have pem cert,rsa_key and ca cert from my own CA. I don't understand what kind of cert do I need in keystore to make it works on tomcat.

SSL on TOMCAT with keytool

2008-08-27 Thread Alexey Eronko
Hello Guys! Don't beat me because I found so much docs about ssl and keystore but I can't get it working with together. I have pem cert,rsa_key and ca cert from my own CA. I don't understand what kind of cert do I need in keystore to make it works on tomcat. I tried keytool -im

SSL on TOMCAT with keytool

2008-08-27 Thread Alexey Eronko
Hello Guys! Don't beat me because I found so much docs about ssl and keystore but I can't get it working with together. I have pem cert,rsa_key and ca cert from my own CA. I don't understand what kind of cert do I need in keystore to make it works on tomcat. I tried keytool -im

RE: Re: Performing SSL on tomcat using the JAAS ream

2007-09-24 Thread Clinton J. Totten
er 21, 2007 9:51 PM To: users@tomcat.apache.org Subject: Re: Performing SSL on tomcat using the JAAS ream The JAASRealm in Tomcat doesn't currently support CLIENT-CERT auth. "Clinton J. Totten" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] I am getting a 401 erro

Re: Performing SSL on tomcat using the JAAS ream

2007-09-21 Thread Bill Barker
The JAASRealm in Tomcat doesn't currently support CLIENT-CERT auth. "Clinton J. Totten" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] I am getting a 401 error when trying to access my webapps deployed on tomcat. I configured the JAAS realm and connection properties according to the

Performing SSL on tomcat using the JAAS ream

2007-09-21 Thread Clinton J. Totten
I am getting a 401 error when trying to access my webapps deployed on tomcat. I configured the JAAS realm and connection properties according to the tomcat documentation in the server.xml file. In the web.xml file the login-config auth method element is set to CLIENT-CERT with a realm name of JAA

RE: Setting Up SSL on Tomcat

2007-09-21 Thread Clifford Bryant
Problem solved. The 8443 port needed to be opened in the firewall. -Original Message- From: Clifford Bryant [mailto:[EMAIL PROTECTED] Sent: Friday, September 21, 2007 8:23 AM To: Tomcat Users List Subject: RE: Setting Up SSL on Tomcat Here is the HTTPS Connector. -Original

RE: Setting Up SSL on Tomcat

2007-09-21 Thread Clifford Bryant
Here is the HTTPS Connector. -Original Message- From: Clifford Bryant [mailto:[EMAIL PROTECTED] Sent: Friday, September 21, 2007 7:19 AM To: Tomcat Users List Subject: RE: Setting Up SSL on Tomcat Here is a simpler version with just the 2 apps that I am interested in deployed

RE: Setting Up SSL on Tomcat

2007-09-21 Thread Clifford Bryant
5 INFO [org.jasig.cas.ticket.registry.support.DefaultTicketRegistryCleaner] - [EMAIL PROTECTED] logs]$ -Original Message- From: Clifford Bryant [mailto:[EMAIL PROTECTED] Sent: Friday, September 21, 2007 6:59 AM To: Tomcat Users List Subject: RE: Setting Up SSL on Tomcat Created MBeanServer with ID: 1f436f5:11527b2e181:-8000:rsdev01.edgewater

RE: Setting Up SSL on Tomcat

2007-09-21 Thread Clifford Bryant
Sent: Thursday, September 20, 2007 11:36 PM To: Tomcat Users List Subject: Re: Setting Up SSL on Tomcat On 9/20/07, Clifford Bryant <[EMAIL PROTECTED]> wrote: > I am trying to set up Tomcat 5.5.23 on a Linux server to use SSL. The > SSL port (8443) is uncommented in the server.xml

Re: Setting Up SSL on Tomcat

2007-09-20 Thread Hassan Schroeder
On 9/20/07, Clifford Bryant <[EMAIL PROTECTED]> wrote: > I am trying to set up Tomcat 5.5.23 on a Linux server to use SSL. The > SSL port (8443) is uncommented in the server.xml. And, I set up a > certificate. I tried to navigate to the Tomcat startup page from > another (Windows) machine. I ca

Setting Up SSL on Tomcat

2007-09-20 Thread Clifford Bryant
I am trying to set up Tomcat 5.5.23 on a Linux server to use SSL. The SSL port (8443) is uncommented in the server.xml. And, I set up a certificate. I tried to navigate to the Tomcat startup page from another (Windows) machine. I can get to the HTTP port (8080). But, I get a "Server not found

RE: Configure SSL on Tomcat.

2007-04-26 Thread Caldarale, Charles R
> From: Cartman [mailto:[EMAIL PROTECTED] > Subject: Re: Configure SSL on Tomcat. > > And. what can I do ? If you choose not to use APR, delete the .dll from the bin directory, and configure SSL according to the doc I gave you before: http://tomcat.apache.org/tomcat-5.5-doc/ss

Re: Configure SSL on Tomcat.

2007-04-26 Thread Cartman
And. what can I do ? On 4/26/07, Caldarale, Charles R <[EMAIL PROTECTED]> wrote: > From: Cartman [mailto:[EMAIL PROTECTED] > Subject: Re: Configure SSL on Tomcat. > > I should install one by one or just tcnative-1.dll?? I'm the wrong person to ask, since I prefer

RE: Configure SSL on Tomcat.

2007-04-26 Thread Caldarale, Charles R
> From: Cartman [mailto:[EMAIL PROTECTED] > Subject: Re: Configure SSL on Tomcat. > > I should install one by one or just tcnative-1.dll?? I'm the wrong person to ask, since I prefer to run pure Java rather than mix native code into the pot. Unless you're really pres

Re: Configure SSL on Tomcat.

2007-04-26 Thread Cartman
> My Apache Tomcat is 5.5.9 > My jdk is 1.5.05 Is that a Sun JDK? If so, you're not being precise with the version number; do you mean 1.5.0_5? Sorry, jdk-1_5_0_05-windows-i586-p.exe And my windows is 2003 server. > > how to I configure apr? If APR is installed, you'll see a tcnative-1.

RE: Configure SSL on Tomcat.

2007-04-26 Thread Caldarale, Charles R
> From: Cartman [mailto:[EMAIL PROTECTED] > Subject: Re: Configure SSL on Tomcat. > > My Apache Tomcat is 5.5.9 > My jdk is 1.5.05 Is that a Sun JDK? If so, you're not being precise with the version number; do you mean 1.5.0_5? > And my windows is 2003 server. > >

Re: Configure SSL on Tomcat.

2007-04-26 Thread Cartman
Hi, thanks for your answer, so... My Apache Tomcat is 5.5.9 My jdk is 1.5.05 And my windows is 2003 server. how to I configure apr? On 4/26/07, Caldarale, Charles R <[EMAIL PROTECTED]> wrote: > From: Cartman [mailto:[EMAIL PROTECTED] > Subject: Configure SSL on Tomcat. > >

RE: Configure SSL on Tomcat.

2007-04-26 Thread Caldarale, Charles R
> From: Cartman [mailto:[EMAIL PROTECTED] > Subject: Configure SSL on Tomcat. > > I try to configure my apache tomcat server with > ssl support, but I can't. What version of Tomcat are you using? (The web sites you listed were for everything from 3.0 through 5.0, so

Configure SSL on Tomcat.

2007-04-26 Thread Cartman
Hi everybody, I try to configure my apache tomcat server with ssl support, but I can't. I've done everything but don't work. I've visited some web pages where say, the same but I can't configure my tomcat. http://tomcat.apache.org/tomcat-5.0-doc/ssl-howto.html http://www.digicert.com/ssl-certif

Re: help - ssl on tomcat

2007-04-16 Thread Susan Teague Rector
Hi Hassan Whoops - I was using 5.5 - just didn't give you the right URL! :) Thanks for the tip - I will look at the SSL connector in the logs thank you! susan Hassan Schroeder wrote: On 4/16/07, Susan Teague Rector <[EMAIL PROTECTED]> wrote: I have Tomcat 5.5 loaded on Linux Redhat. I foll

Re: help - ssl on tomcat

2007-04-16 Thread Hassan Schroeder
On 4/16/07, Susan Teague Rector <[EMAIL PROTECTED]> wrote: I have Tomcat 5.5 loaded on Linux Redhat. I followed these directions explicitly: http://tomcat.apache.org/tomcat-5.0-doc/ssl-howto.html Uh, you should use the documentation for the version that you're actually running, eh? :-)

help - ssl on tomcat

2007-04-16 Thread Susan Teague Rector
Hi all, I just joined the list so please excuse if there are numerous postings about this topic. I did search the archives and have googled quite a bit but cannot figure out why SSL is not working on Tomcat. I have Tomcat 5.5 loaded on Linux Redhat. I followed these directions explicitly: ht

  1   2   >