I am abandoning the IIS/isapi_redirect.dll method of authenticating via SSL
into our web application due to the "authentication" process taking a while,
causing the web app to run abnormally slow.

I am wanting to use our server certificate (PKCS12) as the keystore. I've
been doing a lot of research and it seems that I need to import the root
certificates into the keystore using OpenSSL. What I am not too clear on is
how to edit the server.xml file to accommodate these configurations. Here is
what I have thus far, however, SSL does not seem to be working.

Copied from Notepad:

<!-- Define a SSL HTTP/1.1 Connector on port 8443
         This connector uses the JSSE configuration, when using APR, the 
         connector should be using the OpenSSL style configuration
         described in the APR documentation -->
    
    <Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true"
               keystoreFile="C:\Program Files\Apache Software
Foundation\Tomcat 6.0\con\geo.pfx"
keystorePass="password" keystoreType="pkcs12"
               clientAuth="false" sslProtocol="TLS" />





Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to