Hi,

> -----Original Message-----
> From: Angel, Ronald J [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 21, 2002 5:30 PM
> To: 'Tomcat Users List'
> Subject: RE: Which SSLeay do I need...?
> 
> 
> > I think "SSL Config HOW-TO" is just for you. :))
>       Got it; read it; re-read it.  What am I missing here.
> > Did you do all it says about?
>       1) Downloaded & installed 3 jar files from JSSE.
>       2) Created a keystore - re-created it also - with specified
> password.
>       3) Updated server.xml as instructed.
>       4) restarted tomcat
> 
> 
>       The HOW-TO looks pretty straight forward.
> 
> > At least you need to generate a keystore with
> > aproprite sertificate.
> > 
> > > 
> > >   Question:
> > >      If I disable apache what (if anything else) do I need to do to
> > > Tomcat? 
> > >         Any server.xml mods?
> > >         Update /etc/services?   https is on port 443, change to 8443?
> > >   
> > 
> > The connector with SSL support is defined to listen on 8443 by default.
> > It's done by port attribute. Default port for https is 443.
> > So, if you want just https://yourHost/~yourUser you need to change port
> > attribute to 443 in server.xml Don't forget to change redirectPort in 
> > plain http connector.
> > 
>       The redirectPort still points to 8443, also.
> 
>       To my understanding only processes started by root may connect/bind
>       to ports below 1024.  I'm still starting tomcat as a non-root user,
> hence,
>       I'm using port 8443. 

Oops, sorry. I don't have much background about Linux/Unix.

> 
>       As soon as someone get in here today (quits playing in the snow ;) I
> find
>       out why were not running Tomcat as root.

Then it looks like not SSL related problem.
I think it would be better to start with plain http connector,
get your apps up and running and then add Factory for SSL.
If it won't help try to send your server.xml and tail of logs.

>       Ron
> 

Anton.

--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

Reply via email to