DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=26295>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=26295

HTTPS Connector ignores keystorePassword setting

           Summary: HTTPS Connector ignores keystorePassword setting
           Product: Tomcat 5
           Version: 5.0.16
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: Connector:Coyote
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


I have Tomcat 5 set up to open an HTTPS listen socket on port 8443.  The server
certificate is stored in a JKS keystore within the Tomcat installation
directory.  If I try to protect the keystore with a password other than the
documented default -- "changeit" -- Tomcat cannot open the keystore on startup,
even if I specify the correct password in the Connector entry in server.xml.

Currently, the keystore uses the default password, and Tomcat is able to
retrieve its certificate and private key.  However, if I deliberately specify an
incorrect password for the keystore in server.xml, Tomcat is still able to open
the file.

This suggests that the Tomcat Connector is ignoring the "keystorePassword"
setting and using "changeit" to open the SSL keystore file, regardless of the
actual value in server.xml.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to