Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: error (athena.apache.org: local policy)
Message-ID: <51706E97.8080903@christopherschultz.net>
Date: Thu, 18 Apr 2013 18:07:19 -0400
From: Christopher Schultz <chris@christopherschultz.net>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8;
 rv:17.0) Gecko/20130328 Thunderbird/17.0.5
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: Errors when trying to configure SSL for Apache Tomcat 7
References: <44AFCBE69647314DABFDB0C3F07653C4098A868A@HNCEXCHANGE01.hbcs.org>
 <99C8B2929B39C24493377AC7A121E21FC4A7EBBEF4@USEA-EXCH8.na.uis.unisys.com>
 <44AFCBE69647314DABFDB0C3F07653C4098AAD0A@HNCEXCHANGE01.hbcs.org>
 <516EC8C2.7080004@christopherschultz.net>
 <44AFCBE69647314DABFDB0C3F07653C4098AAE2D@HNCEXCHANGE01.hbcs.org>
In-Reply-To: <44AFCBE69647314DABFDB0C3F07653C4098AAE2D@HNCEXCHANGE01.hbcs.org>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

James,

On 4/17/13 4:10 PM, James Snider wrote:
> I have reinstalled Apache Tomcat with the tcnative library and I
> am not receiving the SSL certificate errors as seen earlier.

Good.

> But I am now receiving the following errors upon startup:

Not so good.

> Apr 17, 2013 3:13:58 PM
> org.apache.catalina.startup.SetAllPropertiesRule begin WARNING:
> [SetAllPropertiesRule]{Server/Service/Connector} Setting property
> 'maxSpareThreads' to '75' did not find a matching property.

Re-read the configuration section on "Connector".

> Apr 17, 2013 3:13:58 PM
> org.apache.catalina.startup.SetAllPropertiesRule begin WARNING:
> [SetAllPropertiesRule]{Server/Service/Connector} Setting property
> 'SSLEngine' to 'on' did not find a matching property.

Re-read the configuration section on "Connector".

> Apr 17, 2013 3:13:58 PM
> org.apache.catalina.core.AprLifecycleListener initializeSSL INFO:
> OpenSSL successfully initialized (OpenSSL 1.0.1d 5 Feb 2013)

Good! OpenSSL launched correctly.

> Apr 17, 2013 3:13:58 PM org.apache.coyote.AbstractProtocol init 
> INFO: Initializing ProtocolHandler ["http-apr-80"] Apr 17, 2013
> 3:13:59 PM org.apache.coyote.AbstractProtocol init INFO:
> Initializing ProtocolHandler ["http-apr-443"] Apr 17, 2013 3:13:59
> PM org.apache.coyote.AbstractProtocol init SEVERE: Failed to
> initialize end point associated with ProtocolHandler
> ["http-apr-443"] java.lang.Exception: Unable to load certificate
> key C:\Program Files\Apache Software Foundation\Tomcat
> 7.0\conf\CRT\hncshvm.hbcs.org.key (error:02001003:system
> library:fopen:No such process) at
> org.apache.tomcat.jni.SSLContext.setCertificate(Native Method)

So the JVM is correctly invoking your native library, but it can't
load the certificate for some reason. My first guess would be a
permissions issue (check file permissions against the effective user
running Tomcat).


> To answer your questions I have Tomcat installed in the C:\Program 
> Files\Apache Software Foudnation\Tomcat directory. I am using a
> windows server 2003 R2 x64 bit OS AND Have java version 1.7
> installed.

Okay. Are you running Tomcat as a service? That often results in weird
permissions issues because services have very few privileges on the
local machine.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=vTgA
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org