Return-Path: <jason@jungawunga.com>
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 75077 invoked from network); 9 Oct 2000 22:03:25 -0000
Received: from relay1.pair.com (209.68.1.20)
  by locus.apache.org with SMTP; 9 Oct 2000 22:03:25 -0000
Received: (qmail 26365 invoked from network); 9 Oct 2000 22:02:35 -0000
Received: from 205-179-150-150.client.dsl.net (HELO junga.jungawunga.com)
 (205.179.150.150)
  by relay1.pair.com with SMTP; 9 Oct 2000 22:02:35 -0000
X-pair-Authenticated: 205.179.150.150
Message-Id: <4.3.2.7.2.20001009150102.01f382d0@mail.jungawunga.com>
X-Sender: jason@mail.jungawunga.com
X-Mailer: QUALCOMM Windows Eudora Version 4.3.2
Date: Mon, 09 Oct 2000 15:04:51 -0700
To: tomcat-user@jakarta.apache.org
From: Jason Eaton <jason@jungawunga.com>
Subject: Re: RES: [Tomcat-users] Re: Does Tomcat 3.1 Support Apache/SSL?
In-Reply-To: <NEBBKJBBNDKPNOCEGEMKCENICBAA.stateri@tesla.com.br>
References: <4.3.2.7.2.20001006191052.025a16c0@mail.jungawunga.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
X-Spam-Rating: locus.apache.org 1.6.2 0/1000/N


Thanks for the sample config file Sergio. That does indeed enable SSL for 
that virtual host. I ran into another problem when I enabled it though. I 
get this error from the Apache www server now;

[09/Oct/2000 14:14:24 24351] [error] Couldn't recover size of server key 
truga.jungawunga.net:443/KEY_LENGTH

The weird thing is if I comment out the additions that Sergio recommends to 
my conf file, Https works just fine with this same key on the main pages, 
but doesnt work on the tomcat urls! Why would Apache complain about the key 
in one instance but not the other.

Yes I did make sure that the "ServerName" is set to the same common name in 
the certificate. Weird problem.

Boggled.

At 09:17 AM 10/9/2000, you wrote:
>Here's a piece of code that describle a virtual host without SSL and with
>SSL :
>
>NameVirtualHost 192.168.0.13:80
><VirtualHost 192.168.0.13:80>
>ServerName www.the_site.com.br
>ApJServMount / ajpv12://192.168.0.13:8007
></VirtualHost>
>
>NameVirtualHost 192.168.0.13:443
><VirtualHost 192.168.0.13:443>
>SSLEngine on
>SSLCertificateFile
>/usr/local/apache/tomcat/webapps/the_site/ssl/www.the_site.com.br.crt
>SSLCertificateKeyFile
>/usr/local/apache/tomcat/webapps/the_site/ssl/www.the_site.com.br.key
>ServerName www.the_site.com.br
>ApJServMount / ajpv12://192.168.0.13:8007
></VirtualHost>
>
>
>Sergio Stateri Jr
>stateri@tesla.com.br
>Tesla Tecnologia
>Sao Paulo (SP) Brazil
>
>-----Mensagem original-----
>De: tomcat-users-admin@lists.real-time.com
>[mailto:tomcat-users-admin@lists.real-time.com]Em nome de Jason Eaton
>Enviada em: Sexta-feira, 6 de Outubro de 2000 23:13
>Para: tomcat-user@jakarta.apache.org
>Assunto: [Tomcat-users] Re: Does Tomcat 3.1 Support Apache/SSL?
>
>
>Does anybody have an example httpsd.conf file I could look at that works
>for SSL?
>
>Thanks.
>
>At 06:04 PM 10/6/2000, you wrote:
>
> >looks fine, i guess.  Is the .jsp URL not found an apache or tomcat error
> >message?
>
>Looks like an Apache error 404. I don't see any hit in the Tomcat logs for
>the url.
>
> >I don't think I can help you because mod_jserv never suited my needs.  I
> >did internal proxing, and now mod_jk is available (and my needs are a lot
> >less at the moment).
> >
> >I would assume to look at the tomcat logs files to verify that the
> >requests aren't coming to it.  Then assume it's the httpd.conf.
> >
> >Just another starting point.  Are .jsp's working without SSL?
>
>Yes, when i don't specify https the JSP stuff works fine.
>
>
> >HTH,
> >
> >Kenneth Topp
> >
> >
> > > </Context>
> > >
> > > At 01:46 PM 10/6/2000, you wrote:
> > >
> > > >On Fri, 6 Oct 2000, Jason Eaton wrote:
> > > >
> > > > >
> > > > > I am using the httpds.conf file included with my Apache
>installation.
> > > > There
> > > > > are <IfDefine SSL> sections in the file. Am I to wrap any Tomcat
> > > > > cofigurations with <IfDefine SSL> as well?
> > > >
> > > >That's a safe bet.  Try towards the bottom.
> > > >
> > > >Good luck.
> > > >
> > > >Kenneth Topp
> > > >
> > > >
> > > > >
> > > > > Sorry I am new to Apache configuration.
> > > > >
> > > > > Thanks.
> > > > >
> > > > > At 01:30 PM 10/6/2000, kenneth topp wrote:
> > > > >
> > > > > >On Fri, 6 Oct 2000, Jason Eaton wrote:
> > > > > >
> > > > > > >
> > > > > > > My Apache configuration supports SSL and is working but when I
> > > > access jsp
> > > > > > > files or any other servlet via Tomcat/Apache/SSL I get url not
> > found.
> > > > > > >
> > > > > > > Are my configurations messed up? Does Tomcat 3.1 support SSL?
> > > > > >
> > > > > >I believe there are some issues in tomcat wrt URI, making
> > assumptions of
> > > > > >it being http: not https:, but I think any problem you have is
> > releated to
> > > > > >your webserver configuration.
> > > > > >
> > > > > >Remeber, if you've done a stock mod_ssl config (for example) the
>ssl
> > > > > >section of the httpd.conf configuration is separate from the normal
> > > > > >configuration.
> > > > > >
> > > > > > >
> > > > > > > Thanks.
> > > > > > >
> > > > > > > -----------------------------------------------------
> > > > > > > Jason Eaton
> > > > > > >
> > > > > > > Jungawunga Inc.
> > > > > > > http://www.jungawunga.com
> > > > > > > 103B Whispering Pines Road
> > > > > > > Scotts Valley, CA 95066
> > > > > > > p 831.438.0475
> > > > > > > m 408.858.5585
> > > > > > >
> > > > >
> > > > >
> > > > > -----------------------------------------------------
> > > > > Jason Eaton
> > > > >
> > > > > Jungawunga Inc.
> > > > > http://www.jungawunga.com
> > > > > 103B Whispering Pines Road
> > > > > Scotts Valley, CA 95066
> > > > > p 831.438.0475
> > > > > m 408.858.5585
> > > > >
> > >
> > >
> > > -----------------------------------------------------
> > > Jason Eaton
> > >
> > > Jungawunga Inc.
> > > http://www.jungawunga.com
> > > 103B Whispering Pines Road
> > > Scotts Valley, CA 95066
> > > p 831.438.0475
> > > m 408.858.5585
> > >
>
>
>-----------------------------------------------------
>Jason Eaton
>
>Jungawunga Inc.
>http://www.jungawunga.com
>103B Whispering Pines Road
>Scotts Valley, CA 95066
>p 831.438.0475
>m 408.858.5585
>
>_______________________________________________
>tomcat-users mailing list
>tomcat-users@lists.real-time.com
>https://mailman.real-time.com/mailman/listinfo/tomcat-users


-----------------------------------------------------
Jason Eaton

Jungawunga Inc.
http://www.jungawunga.com
103B Whispering Pines Road
Scotts Valley, CA 95066
p 831.438.0475
m 408.858.5585