Return-Path: 
 <tomcat-user-return-103295-apmail-jakarta-tomcat-user-archive=jakarta.apache.org@jakarta.apache.org>
Delivered-To: apmail-jakarta-tomcat-user-archive@www.apache.org
Received: (qmail 97181 invoked from network); 14 Jun 2004 17:20:43 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur-2.apache.org with SMTP; 14 Jun 2004 17:20:43 -0000
Received: (qmail 37962 invoked by uid 500); 14 Jun 2004 17:20:23 -0000
Delivered-To: apmail-jakarta-tomcat-user-archive@jakarta.apache.org
Received: (qmail 37852 invoked by uid 500); 14 Jun 2004 17:20:22 -0000
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
List-Subscribe: <mailto:tomcat-user-subscribe@jakarta.apache.org>
List-Help: <mailto:tomcat-user-help@jakarta.apache.org>
List-Post: <mailto:tomcat-user@jakarta.apache.org>
List-Id: "Tomcat Users List" <tomcat-user.jakarta.apache.org>
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 37835 invoked by uid 99); 14 Jun 2004 17:20:22 -0000
Received: from [65.54.187.104] (HELO hotmail.com) (65.54.187.104)
  by apache.org (qpsmtpd/0.27.1) with ESMTP; Mon, 14 Jun 2004 10:20:22 -0700
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
	 Mon, 14 Jun 2004 10:19:51 -0700
Received: from 193.144.50.84 by by18fd.bay18.hotmail.msn.com with HTTP;
	Mon, 14 Jun 2004 17:19:51 GMT
X-Originating-IP: [193.144.50.84]
X-Originating-Email: [petinboy@hotmail.com]
X-Sender: petinboy@hotmail.com
From: =?iso-8859-1?B?Sm9z6SBNYW51ZWwgUHJhZGEgU2llcnJh?= <petinboy@hotmail.com>
To: tomcat-user@jakarta.apache.org
Bcc: 
Subject: combine http and https
Date: Mon, 14 Jun 2004 19:19:51 +0200
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1; format=flowed
Message-ID: <BAY18-F54WWnHg4UeaC000038c4@hotmail.com>
X-OriginalArrivalTime: 14 Jun 2004 17:19:51.0705 (UTC)
 FILETIME=[CD756890:01C45233]
X-Virus-Checked: Checked
X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N


Hi mariano.

First of all sorry by send my question to your private email, and sorry to 
all of tomcat list users.

I have done all you write in your message.
I have j2sdk1.4.1 and j2re1.4.2_04 and it isn't necessary download jsse.
I have create the certificate like you write above, with de password 
"changeit".

Mi server.xml is:
    <!-- Define an SSL HTTP/1.1 Connector on port 8443 -->

    <Connector className="org.apache.catalina.connector.http.HttpConnector"
               port="8443" minProcessors="5" maxProcessors="75"
               enableLookups="false"
               acceptCount="100" debug="0" scheme="https" secure="true">
      <Factory className="org.apache.catalina.net.SSLServerSocketFactory"
               clientAuth="false" protocol="TLS"/>
    </Connector>

I think that the problem may be into the server.xml
when I connect to my application with the port 8443, it show me a website 
certificate.
I have not sslProtocol, keystorieFile... Are they necessary? If it is true, 
what should I do?

Thanks.



<------------------------------------------------------------------------------------------->
Do you have well configured Tomcat's server.xml file for SSL connections ?

For example:
<Connector port="8443" maxThreads="150"
	     minSpareThreads="25" maxSpareThreads="75"
	     enableLookups="false" disableUploadTimeout="true"
           acceptCount="100" debug="0" scheme="https" secure="true"
           clientAuth="false" sslProtocol="TLS" URIEncoding="UTF-8"
           keystoreFile="/...../.../Tomcat's SSL File"
keystorePass="........"/>

And well generated certificate necesary for SSL ?:

1.	If you are running a 1.3 JVM, download JSSE 1.0.3 (or later) from
http://java.sun.com/products/jsse/ and either make it an installed extension
on the system, or else set an environment variable JSSE_HOME that points at
the directory into which you installed JSSE.
2.	Create a certificate keystore by executing the following command:

	Windows:%JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA
	Unix:$JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA

	and specify a password value of "changeit".
3.	Uncomment the "SSL HTTP/1.1 Connector" entry in
$CATALINA_HOME/conf/server.xml and tweak as necessary.

And, please don't send e-mails to private address, always to Tomcat list
address.

Mariano L�pez

_________________________________________________________________
�Est�s pensando en cambiar de coche? Todas los modelos de serie y extras en 
MSN Motor. http://motor.msn.es/researchcentre/


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org