Return-Path: Delivered-To: apmail-jakarta-tomcat-user-archive@apache.org Received: (qmail 61028 invoked from network); 22 Sep 2002 04:26:53 -0000 Received: from unknown (HELO nagoya.betaversion.org) (192.18.49.131) by daedalus.apache.org with SMTP; 22 Sep 2002 04:26:53 -0000 Received: (qmail 29338 invoked by uid 97); 22 Sep 2002 03:21:21 -0000 Delivered-To: qmlist-jakarta-archive-tomcat-user@jakarta.apache.org Received: (qmail 29315 invoked by uid 97); 22 Sep 2002 03:21:21 -0000 Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Subscribe: List-Help: List-Post: List-Id: "Tomcat Users List" Reply-To: "Tomcat Users List" Delivered-To: mailing list tomcat-user@jakarta.apache.org Received: (qmail 8451 invoked by uid 98); 21 Sep 2002 05:41:00 -0000 X-Antivirus: nagoya (v4218 created Aug 14 2002) Message-ID: <003a01c26131$1f79c140$8001c0c0@mas> From: "Shubha Somayaji" To: Subject: Tomcat4.0 with SSL on windows2000 Date: Sat, 21 Sep 2002 11:08:27 +0530 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0037_01C2615F.36222530" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2919.6600 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600 X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N ------=_NextPart_000_0037_01C2615F.36222530 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello, I am trying to integrate tomcat4.0 will SSL on windows2000. I did the = following steps. 1. Downloaded jsse and set the classpath for the jars 2. keytool -genkey -alias tomcat -keyalg RSA 3. keytool -certreq -keyalg RSA -alias tomcat -file certreq.csr 4. Submited the certreq.csr to verisign for 14days trial server ID 5. I got a file getcacert.cer and a certificate as a text by email. 6 Copied the text and save it as xxx.crt=20 7. Imported the getcacert.cer on to the IE5 Trusted root authoroities 8. Imported both getcacert.cer and xxx.crt to .keystore created in my = home directory. 9. Uncommented the https part of connector in server.xml and made = clientAuth=3Dtrue 10.Started the tomcat Now the problem is when I enter the url https://localhost:8443 it is = showing me the empty 'Client Authentication' dialog box. I do not understand where I have gone wrong. I tried another approch of = creating the certificate using openssl and importing it to the = .keystore. But while importing it gives me error "public key and = keystore doesn't match". Can anyone of you please help me as soon as possible with the steps to = follow in achieving this. Thanking you, Regards Shubha =20 ------=_NextPart_000_0037_01C2615F.36222530--