Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (athena.apache.org: domain of daniele.dml@googlemail.com
 designates 209.85.218.222 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=googlemail.com; s=gamma;
        h=mime-version:date:message-id:subject:from:to:content-type;
        b=VmlfrkoSrKe4LQXhdapSQsazmRZtlGMj3VVQROgGnWQ0LVBJ8JN7IO+DIGq5il0yfq
         jH9yOcWSMqD/+3Df88RwXbY2QxfI9zThdI9IFbynZw2tlO7sYB1i8gjmMJmC/LLtD2Vg
         OIWmI/JosomkJkqXfUXosVKm7HCP7X4T7g+KE=
MIME-Version: 1.0
Date: Tue, 18 Aug 2009 19:01:25 +0100
Message-ID: <190e13280908181101v25129c9bn334bb8d7470edc6a@mail.gmail.com>
Subject: Installing SSL connector for Tomcat on Linux/Debian
From: Daniele Development-ML <daniele.dml@googlemail.com>
To: Tomcat Users List <users@tomcat.apache.org>
Content-Type: multipart/alternative; boundary=0015175cd19a8e66f404716e4e3d

--0015175cd19a8e66f404716e4e3d
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Hello everybody,

I'm trying to set up a SSL transport layer, but I'm coming up against some
difficulties.

Specifically, I followed all the steps requires and specified as in the
Tomcat guide - adding some suggestions I found around on several web site
for the installation of APR libraries - but still it doesn't work.

I'm using Tomcat 6.0.20 with the last version of APR library, on a
Lenny/Debian distribution.

The output I get in catalina.out is:

18-Aug-2009 18:05:55 org.apache.catalina.startup.SetAllPropertiesRule begin
WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property
'clientAuth' to 'false' did not find a matching property.
18-Aug-2009 18:05:55 org.apache.catalina.startup.SetAllPropertiesRule begin
WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property
'SSLEngine' to 'on' did not find a matching property.
18-Aug-2009 18:05:55 org.apache.catalina.core.AprLifecycleListener init
INFO: Loaded APR based Apache Tomcat Native library 1.1.16.
18-Aug-2009 18:05:55 org.apache.catalina.core.AprLifecycleListener init
INFO: APR capabilities: IPv6 [true], sendfile [true], accept filters
[false], random [true].
18-Aug-2009 18:05:55 org.apache.catalina.core.AprLifecycleListener
lifecycleEvent
INFO: Failed to initialize the SSLEngine.
18-Aug-2009 18:05:55 org.apache.coyote.http11.Http11AprProtocol init
INFO: Initializing Coyote HTTP/1.1 on http-8080
18-Aug-2009 18:05:55 org.apache.coyote.http11.Http11AprProtocol init
INFO: Initializing Coyote HTTP/1.1 on http-8443
18-Aug-2009 18:05:55 org.apache.coyote.ajp.AjpAprProtocol init
INFO: Initializing Coyote AJP/1.3 on ajp-8009
18-Aug-2009 18:05:55 org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 656 ms

While my server configuration is:

<!-- Define a SSL HTTP/1.1 Connector on port 8443 -->
<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true" clientAuth="false"
sslProtocol="TLS" enableLookups="false" disableUploadTimeout="true"
SSLEngine="on"
SSLCertificateFile="${catalina.base}/config/certs/self-signed-cert.pem"
SSLCertificateKeyFile="${catalina.base}/config/certs/rsa-private-key.pem"/>

Where the certificates where generated with OpenSLL on a Windows Platform.

In addition, I included the following lines at the beginning of setclass
file

CATALINA_OPTS="$CATALINA_OPTS
-Djava.library.path=/home/daniele/tomcat-6.0.20/bin/tomcat-native-1.1.16-src/jni/native/.libs"

Where the APR libraries are deposed after the installation.

Any hints or suggestions?

Daniele

--0015175cd19a8e66f404716e4e3d--