tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
Subject DO NOT REPLY [Bug 51343] New: Inconsistency in ssl-howto apr example configuration
Date Wed, 08 Jun 2011 17:48:14 GMT

             Bug #: 51343
           Summary: Inconsistency in ssl-howto apr example configuration
           Product: Tomcat 7
           Version: trunk
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: minor
          Priority: P2
         Component: Documentation
    Classification: Unclassified

Sam as in Bug 51342

I checked the same config examples (docs/ssl-howto.xml, apr.xml) and saw the
same issue.

When going through the SSL docs to use APR for native OpenSSL I found an
inconsistency in the docs.

it suggests that a correct connector in the server.xml should look like:

<-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 -->
           port="8443" maxThreads="200"
           scheme="https" secure="true" SSLEnabled="true"
           clientAuth="optional" SSLProtocol="TLSv1"/>

this however didn't work and resulted in:

WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property
'clientAuth' to 'true' did not find a matching property.

An actual working config can be found in . I propose copying the
example section:

<Connector port="443" maxHttpHeaderSize="8192"
               enableLookups="false" disableUploadTimeout="true"
               acceptCount="100" scheme="https" secure="true"
               SSLCertificateKeyFile="${catalina.base}/conf/localhost.key" />

To replace the, what I believe to be false, example in the ssl-howto.

Configure bugmail:
------- You are receiving this mail because: -------
You are the assignee for the bug.

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message