Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (athena.apache.org: domain of knst.kolinko@gmail.com
 designates 209.85.220.173 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type:content-transfer-encoding;
        b=V0S1kpvX/pbRh8KHGG/hi3QKe61NTANxvYrK2Dp1bvNe9ABQmLayy8YgcNfMcuy47d
         dlVvQx7qCXmKcgP9UWPgLMEMMnFwKmYvBK0FlCROdf4cKt1nRZBvmYLj+G5VMh/EjMEB
         GTPltPVuq3iEJqzIZUdQ6KMTCNIktQr2k6fHg=
MIME-Version: 1.0
In-Reply-To: <BANLkTi=Cc9seWRrKwtrez6u+gNJZC9EM5g@mail.gmail.com>
References: <BANLkTi=Cc9seWRrKwtrez6u+gNJZC9EM5g@mail.gmail.com>
Date: Tue, 10 May 2011 21:48:02 +0400
Message-ID: <BANLkTinMZgwhCRM4JOC=kDopH1eduiAiVQ@mail.gmail.com>
Subject: Re: SSL on Tomcat5
From: Konstantin Kolinko <knst.kolinko@gmail.com>
To: Tomcat Users List <users@tomcat.apache.org>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

2011/5/10 Lunita <hoshi.utsuku@gmail.com>:
> Hi all!
>
> I amb trying to configure SSL for Tomcat Manager with APR. I have a weird
> problem, port 8443 is listening, but no HTTPS over there! 8080 and 8443
> ports are open with HTTP
>
> I compiled tomcat native with this configure:
>
> "--prefix=3D/opt/tomcat/" \
> "--with-apr=3D/opt/apr-1.4.2/" \
> "--with-ssl=3D/usr" \
> "--with-java-home=3D/usr/java/jdk1.6.0_23/" \
> "--libdir=3D/usr/lib" \
>
>
> At startup, Tomcat load OK the library:
>
> INFO: Loaded APR based Apache Tomcat Native library 1.1.20.
> May 10, 2011 6:36:07 PM org.apache.catalina.core.AprLifecycleListener ini=
t
> INFO: APR capabilities: IPv6 [true], sendfile [true], accept filters
> [false], random [true].
> May 10, 2011 6:36:07 PM org.apache.coyote.http11.Http11AprProtocol init
> INFO: Initializing Coyote HTTP/1.1 on http-8080
> May 10, 2011 6:36:07 PM org.apache.coyote.http11.Http11AprProtocol init
> INFO: Initializing Coyote HTTP/1.1 on http-8443
>
> My config at server.xml looks OK ...
>
> <Connector port=3D"8443" maxHttpHeaderSize=3D"8192"
> =A0 =A0 =A0 =A0 =A0 maxThreads=3D"200" minSpareThreads=3D"25" maxSpareThr=
eads=3D"75"
> =A0 =A0 =A0 =A0 =A0 scheme=3D"https" secure=3D"true" SSLEnabled=3D"true"
>
> SSLCertificateFile=3D"/opt/apache-tomcat-5.5.33/conf/tomcat.key.noPasswd"
> =A0 =A0 =A0 =A0 =A0 SSLCertificateKeyFile=3D"/opt/apache-tomcat-5.5.33/co=
nf/XX.cer"
> =A0 =A0 =A0 =A0 =A0 clientAuth=3D"false" SSLProtocol=3D"TLSv1"/>
>
>
> Any help? I'm really lost =3D(

Configuration of APR/OpenSSL (aka "native") connector with SSL is documente=
d in
http://tomcat.apache.org/tomcat-5.5-doc/apr.html#HTTPS

Apparently you are missing SSLEngine=3D"on"

Note, that Tomcat 5.5 does not warn about any unknown attributes etc.
(Tomcat 6 and later do give warnings), so you should read the
configuration docs carefully.

What documentation you have followed? (Maybe something needs
amendments / corrections there?)

Best regards,
Konstantin Kolinko

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org