Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: how to configure ssl for tomcat 6
Special Forums Cybersecurity how to configure ssl for tomcat 6 Post 302398663 by mcW on Thursday 25th of February 2010 07:57:26 AM
Old 02-25-2010
how to configure ssl for tomcat 6
Hi,

my server is running a tomcat servlet container.
yesterday a bought a ssl-certificate from geotrust.com.

i got a private-key file and a cert-file (PKCS10).

i followed the instructions on Apache Tomcat 6.0 - SSL Configuration HOW-TO

first, i created a keystore:
Code:
$JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA

after this uncomment this part in the server.xml:
Code:
<-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 -->
<Connector 
           port="443" maxThreads="200"
           scheme="https" secure="true" SSLEnabled="true"
           keystoreFile="/root/.keystore" keystorePass="mypw"
           clientAuth="false" sslProtocol="TLS"/>

/root/.keystore really exists and i used the pw i created the keystore with.

now i restarted the server. everythings works fine, i got a connection on port 443.
after this i wanted to install the certificate i got from geotrust.

before that, i installed the root certifcate i got from this page: https://www.geotrust.com/resources/r...tes/index.html (Equifax Secure Certificate Authority (Base-64 encoded X.509)
Code:
keytool -import -alias root -keystore /root/.keystore \
    -trustcacerts -file equifax.cer

the system told me, that this certificate already exists, i decided to overwrite it.

now in tried to install my certifcate:
Code:
keytool -import -alias tomcat -keystore /root/.keystore \
    -file www.mydomain.cert

but i got this error msg:
Code:
keytool error: java.lang.Exception: Public keys in reply and keystore don't match

i dont know what i did wrong. and whatfor do i need my private-key file?


EDIT: i solved the problem. old.nabble.com/tomcat6-and-https-td27515107.html
Last edited by mcW; 02-25-2010 at 09:42 AM..
 

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

implicit ssl vs explicit ssl

Can someone explain the difference between the two. Thanks (1 Reply)
Discussion started by: jerardfjay
1 Replies

2. UNIX for Dummies Questions & Answers

to enable POP3(ssl) and SMTP(ssl) in Squid

i have configured Squid proxy server in Fedora 8 with two network interfaces. HTTP, HTTPS, FTP are working fine but we are unable to download mails using mail clients from mail server with POP3(ssl) and SMTP(ssl). so please someone help us how to enable pop and smtp in Squid. (1 Reply)
Discussion started by: praneel2k
1 Replies

3. Red Hat

Configure Tomcat to syslog

Hi ALL, Thanks for previous replies.. This thread is regarding tomcat logs -> Syslog Server. I have followed this doc:- Red Hat Knowledgebase: How do I log Tomcat output to a remote syslog server? But no success.. any clues? Thanks alot! Sudhir (3 Replies)
Discussion started by: sidhurana
3 Replies

4. Web Development

Apache, cgi script run twice when ssl, once when not ssl

I have interesting problem. https:/host/some/x.cgi - this script has run twice when I call this url But http:/host/some/x.cgi work fine, only once. Output is text/plain. If I change output format to the Content-type text/html, then both urls works fine - executed only once. (2 Replies)
Discussion started by: kshji
2 Replies

5. Solaris

tomcat installation

hi.. i need to install tomcat on my solaris 10 x86 OS.. can u please guide me .. i know that tomcat is already present in solaris 10 x86.. tell me how to enable it.. tel me as soon as possible.. i tried but its throwing me the following error.. The JAVA_HOME environment variable is not... (5 Replies)
Discussion started by: senkerth
5 Replies

6. IP Networking

configure apache to work with ssl

Hi, I need help to configure the apache to work with ssl. I have managed to create self-signed certificate according to the instruction in the following link. So I have the crt file and the key file. however when I add: <Virtualhost *:443> SSLEngine on ... (1 Reply)
Discussion started by: programAngel
1 Replies

7. Solaris

configure iplanet DS for SSL without console?

Hey guys, Is it possible to configure iplanet DS for SSL without the DS console? I cannot find any documentation regarding it. The iplanet DS document only references using the DS console which I do not have. In Sun One, you can use dsadm to import certs however that is not available in iplanet... (0 Replies)
Discussion started by: s ladd
0 Replies

8. Solaris

Tomcat..Unable to deploy application remotely in tomcat

Hi, We have upgrade tomcat from 5.0.20 to 7.0.33 and made changes to server.xml file according to newer version.. how ever the upgrade went fine and now i am unable to deploy application remotely.. it is giving 403 access denied error.. we have seperate appbase directory mentioned in server.xml..... (0 Replies)
Discussion started by: phani4u
0 Replies

9. Red Hat

SSL Certificate Renewal on Tomcat

Hi, I want to renew the ssl certificate for one of my application on tomcat without down time. I want to know what would the possible impacts for the users who currently have sessions to the app. Regards, Arumon (1 Reply)
Discussion started by: arumon
1 Replies

10. Linux

Apache wildcard ssl on subdomain serves same page for non ssl virtualhosts

Issue observed: I have configured ng.my-site.com using widlcard ssl cert. When I hit https://www.my-site.com it loads ng.my-site.com website! please advise if I missed any concept / configs... Thank you! httpd.conf <VirtualHost *:80> ServerName www.my-site.com ServerAdmin... (0 Replies)
Discussion started by: ashokvpp
0 Replies

LEARN ABOUT SUNOS

wanboot_keymgmt

wanboot_keymgmt(1M)					  System Administration Commands				       wanboot_keymgmt(1M)

NAME

       wanboot_keymgmt - insert and extract keys

SYNOPSIS

       /usr/lib/inet/wanboot/keymgmt -i -k key_file -s keystore -o type=keytype

       /usr/lib/inet/wanboot/keymgmt -x -f outfile -s keystore -o type=keytype

DESCRIPTION

       The keymgmt utility has two purposes:

	 o  To take a raw key, stored in key_file, and insert it in the repository specified by keystore.

	 o  To extract a key of a specified type from the repository specified by keystore, depositing it in outfile.

       outfile	will be created if it does not already exist. The type of key being added or extracted is specified by keytype and may have one of
       four values: 3des, aes, rsa, or sha1 (the last used by HMAC SHA-1). When extracting a key, the first key with an OID matching the  supplied
       type is used.

ARGUMENTS

       The following arguments are supported:

       -i

	   Used in conjunction with -k to insert a raw key in keystore.

       -f outfile

	   Used to specify a file to receive an extracted key.

       -k key_file

	   Used in conjunction with -i to specify the file in which a raw key is stored. This key will be inserted in keystore.

       -o type=keytype

	   Specifies the type of key being inserted or extracted. Must be one of 3des, aes, rsa, or sha1.

       -s keystore

	   Specifies a repository in which a key will be inserted or from which a key will be extracted.

       -x

	   Used in conjunction with -f to extract a key of a specified type and deposit it in outfile.

EXIT STATUS

       0

	   Successful operation.

       >0

	   An error occurred.

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Availability		     |SUNWwbsup 		   |
       +-----------------------------+-----------------------------+
       |Interface Stability	     |Obsolete			   |
       +-----------------------------+-----------------------------+

SEE ALSO

       attributes(5)

       ITU-T Recommendation X.208

SunOS 5.10							    18 Apr 2003 					       wanboot_keymgmt(1M)
All times are GMT -4. The time now is 06:56 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy