Ken Johanson wrote:
> Ken Johanson wrote:
> <snip>
>
>> After doing a kill, then startup I now get:
>>
>> java.lang.Exception: Invalid Server SSL Protocol
>> at org.apache.tomcat.jni.SSLContext.make(Native Method)
>> at
>> org.apache.tomcat.util.net.AprEndpoint.init(AprEndpoint.java:693)
>> at
>> org.apache.coyote.http11.Http11AprProtocol.init(Http11AprProtocol.java:107)
>>
>> at
>> org.apache.catalina.connector.Connector.initialize(Connector.java:1058)
>> ...........
>> Oct 15, 2009 10:10:44 PM org.apache.catalina.startup.Catalina load
>> SEVERE: Catalina.start
>> LifecycleException: Protocol handler initialization failed:
>> java.lang.Exception: Invalid Server SSL Protocol
>> at
>> ......
>>
>> But I can't see where I'm deviating from docs with:
>> <Connector
>> port="8443"
>> enableLookups="false"
>> SSLEnabled="true" scheme="https" secure="true"
>> SSLCertificateFile="${catalina.base}/conf/cert.pem"
>> SSLCertificateKeyFile="${catalina.base}/conf/key.pem"
>> disableUploadTimeout="true"
>> SSLVerifyClient="optional"
>> sslProtocol="TLS"
>> />
>>
>> BTW I'm now tryng recent apache-tomcat-6.0.20 and rebuilt
>> tomcat-native-1.1.16.
>>
>> Any insight would be immensely appreciated!
>>
>> Best regards,
>> -Ken
>>
>>
>
> Presumably the shutdown failure is caused by this NPE interrupting the
> call:
>
> Oct 15, 2009 10:19:29 PM org.apache.coyote.http11.Http11AprProtocol destroy
> INFO: Stopping Coyote HTTP/1.1 on http-8080
> Oct 15, 2009 10:19:29 PM org.apache.catalina.connector.MapperListener
> destroy
> WARNING: Error unregistering MBeanServerDelegate
> java.lang.NullPointerException
> at
> org.apache.catalina.connector.MapperListener.destroy(MapperListener.java:171)
>
> at
> org.apache.catalina.connector.Connector.stop(Connector.java:1179)
> at
> org.apache.catalina.core.StandardService.stop(StandardService.java:593)
>
For the benefit of others:
the solution to this was to add the element:
<Listener className="org.apache.catalina.core.AprLifecycleListener"
SSLEngine="on"/>
as a child node of the 'Server' element.
This fact IS listed here:
http://tomcat.apache.org/tomcat-6.0-doc/apr.html
although it might be argued it is not clear that the Listener is
REQUIRED for SSL to work under APR (listener may imply to some people
that a user listener is offered for those who wish to intercept SSL
session events)
Regards,
-Ken
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
|