How to make tomcat 5 support SSL (https)?

Hi,
is there a way to make tomcat support SSL (https)?
i using: Apache 1.3.33
with : Tomcat 5.0.28-1.00RC2
and : jakarta-tomcat-connectors-jk-1.2.6
JDK: j2sdk1.4.0_04
Many thanks
Anatolia

Thanks very much Sherbir,
But JSSE is integrated into the Java 2 SDK, Standard Edition, v 1.4 and above!
here is what i'm facing:
the documentation says:
>
It is important to note that configuring Tomcat to take advantage of secure sockets is usually only necessary when running it as a stand-alone web server. When running Tomcat primarily as a Servlet/JSP container behind another web server, such as Apache or Microsoft IIS, it is usually necessary to configure the primary web server to handle the SSL connections from users. Typically, this server will negotiate all SSL-related functionality, then pass on any requests destined for the Tomcat container only after decrypting those requests. Likewise, Tomcat will return cleartext responses, that will be encrypted before being returned to the user's browser. In this environment, Tomcat knows that communications between the primary web server and the client are taking place over a secure connection (because your application needs to be able to ask about this), but it does not participate in the encryption or decryption itself.
I'm running running Tomcat as a Servlet/JSP container behind Apache 1.3.33 web server.
So all SSL requests are handled by apache web server, but the problem I'm facing is that if i request any jsp page using https (ssl) i get plain text and it's not handled by tomcat!
i have a test page called test.jsp:
<html>
<head>
<title>JSP test page</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
2 x 2 = <%= 2 + 2 %>

</body>
</html> If I request this page using normal http request I get my results fine:
2 x 2 = 4
but if i request the page using https (ssl) I get a clear plain text of my jsp file content like this:
<html>
<head>
<title>JSP test page</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
2 x 2 = <%= 2 + 2 %>

</body>
</html> Now how do I fix this problem and make apache passes the jsp file to tomcat if the request was https (ssl) and not send me cleartext of my file content!
Many thanks
Anatolia

Similar Messages

How do I get rid of a few Internet sites, namely: Firefox is not supported? How to Make Firefox supported for these sites?

Firefox does not support some web sites?
How to Make Firefox supports these sites?

Firefox does not support some web sites?
How to Make Firefox supports these sites?
This URL
# http://e-imamu.edu.sa/emam/login/admin/CheckUserRegistrationAction.do
# http://www.moi.gov.sa/wps/portal/!ut/p/c1/pY_RCoIwFIafKHY2t-mtztSlOSFW5o3sImKQGhE9f1oQFLiCzrn8_v9wPtSgcXtzs0dztUNvTqhGDW-ZqIQM1h5OK-0DSXy6EjwPgOGR73lbKqITKjEO-BID4RmNiq2ENPZ-ab-4KrMYJORxVChFaMr_aQP70t5NrvMJ6j25y23iMDMhfNx__y8X1Mkf9i4--bk4YajMhu6ANuaCzp3WNVhp5SK8A3BThH0!/dl2/d1/L0lDU0NTSUpKSkNncFJBISEvb0VvUUFBSVFKQUFNWXhpbElNNExnbWNBL1lCSkp3NDU0NTAtNGtzbHl0dyEhLzdfNUNQQ0k4TTMxT0Q0NTBJMFVGUkRVTDEwSDcvamF2YXguc2VydmxldC5pbmNsdWRlLnBhdGhfaW5mby8lMFRyYWZmaWNWaW9sYXRpb25zVmlldy5qc3A!

How to make tomcat still running after reboot

hi all,
i want ask about how to make tomcat still running after our computer reboot.
so our server still can serve the the request without we start manualy the tomcat.
please replies
thank's before

*nix or win32 or other?

Oracle AS 10gR2: create new oc4j instance supporting ssl/https

hi,
i've got an oracle application server 10.1.2 (infra and midtier).
in the midtier i want to add a new oc4j-instance which is possible via oracle enterprise manager 10g. after i've created the new oc4j-instance and deployed a war-file ("myapp") i can access a jsp of the deployed application with "http://myserver/myapp/test.jsp". now i want to enable ssl/https for my new oc4j-instance.
i did the following steps according to the manual (http://download-west.oracle.com/docs/cd/B14099_19/web.1012/b14013/configssl.htm):
1) created certificate with keytool
2) added secure-web-site.xml (new oc4j-instance)
3) modified sever.xml (new oc4j-instance)
4) restarted new oc4j-instance
my test.jsp is still available with "http://myserver/myapp/test.jsp", but when i try to access it with "https://myserver/myapp/test.jsp" i get an error that the resource is not found. strange that when accessing test.jsp with http it is searched in the folder of my new oc4j-instance (%ORACLE_HOME%/j2ee/oc4jnew/...), but when i want to access the page through https the server looks for the jsp in the default oc4j "home" (%ORACLE_HOME%/j2ee/home/...).
what's the reason for that an how can i correct it?
regards,
matthias
Edited by: matthias on Apr 26, 2010 4:15 PM

You need to secure the HTTP Server and not the OC4J, remember that HTTP and WebCache are your frontends for any presentation layer, you need to modify ssl.conf and webcache in WebCache Admin page (in EM Console) to make them use ssl ports, as well as you want to use url with no port, you need to use port 443.
Greetings

How to make iTunes support more than just one harddrive

The title of this topic says it all: How do I make iTunes support more than just one harddrive? I cannot afford to buy a really huge drive just because iTunes doesn't support more than one.
There must be a way around this! Anyone?

I sure hope so. I run iTunes on an iBook G4 with limited space. I've got about 15gigs of music on an external harddrive. I only use the harddrive at home so I like to keep a handful of albums with me on the lappy. There should be some way to designate a primary folder on the laptop for imports, and a secondary (external or whatever) for the bulk of the library. Maybe some nifty way to do quick transfers between them within iTunes. Like a relocate function.
Say I want the new death cab for cutie album on the laptop this week, but next week I want to swap it out with something new that comes out. It would be nice to highlight an album and select "transfer to secondary" so that iTunes can move the files for you, keep them organized, and keep track of them.
That doesn't sound so difficult...

How to make JEditorPane support applet?

hi hi,
i would like to know how to make the JEditorPane support applet coming from internet source. i will be using JEditorPane to view web page but if it contains applet, how can i make JEditor support it? what should i need to do so. pls give me some guide lines. thanks

That's an interesting question. The short answer is, you can't. For one, the APPLET tag is ignored by the Swing HTML parser. Then, I'm not sure, what happens if you embedd heavy-weight components like applets into an editor pane.
However, you can use JEditorPane e = new JEditorPane();
e.setText("Hallo, Welt");
e.setCaret(5);
e.insertComponent(new JButton("Click me"));to add swing components to your text. So you might be able to create a working solution based on this foundation.
I can imagine two approaches. You could either create your own applet-like JEditorPanelets which would be basically JPanels with some glue code to allow the the panelet to access its editorPane.
Or you could explore the approach to add a heavy weight applet and write a compatiblily stub. Here's an outline class AppletAwareEditorPane extends JEditorPane {
    List applets;
    MyAppletStub stub;
    public void insertApplet(Applet a) {
      applets.add(a);
      a.setStub(stub);
      a.init();
    public void startApplets() {
      Iterator i = applets.iterator();
      while(i.hasNext()) ((Applet)i.next()).start();
    }However, each applet would require to run in its own tread and I'm pretty sure this would break swing as it is not thread save.
bye

How to make 8830 support chinese sms in cdma network?

Hello,i have been using 8830 for many years,in cdma network,it cannot show or send chinese sms,how to solve this problem?

Hi mike_jeson,
Welcome to BlackBerry Support Community Forums.
Language support availability is determined by your wireless provider and is available for installation in your BlackBerry Device Software. You can download the most recent version of BlackBerry Device Software from your provider's download site in the following list. http://bbry.lv/ad7CII This article should help you install available language packs. http://bbry.lv/9IpPf9
-FS
Come follow your BlackBerry Technical Team on Twitter! @BlackBerryHelp
Be sure to click Kudos! for those who have helped you.
Click Solution? for posts that have solved your issue(s)!

D-Link DBT-122 USB Bluetooth Adapter - how to make it support 2 devices?

For Macs not originally equipped with Bluetooth hardware Apple used to recommend purchasing D-Link's DBT-120 (rev. B or later). If I understand correctly, after pluggin-in the device it was necessary to run Apple's Bluetooth Firmware update 1.3.3 to get it working.
The DBT-120 device may still be available for purchase in some parts of the world but in Europe D-Link is now selling the replacement DBT-122 (no revision is indicated). The device is advertised as being 'Mac-compatible (check, for instance, http://www.dlink.co.uk/?go=gNTyP9CgrdFOIC4AStFCF834mptYKO9ZTdvhLPG3yV3oVIF+h6ltb NlwaaFp6DQoHDrqyyRF/okIB9vv ).
My problem is after having plugged-in my brand new DBT-122 onto an USB port of my 'old' G4 eMac, I can get my Bluetooth Mighty Mouse working, or my Bluetooth Apple Keyboard working, BUT NOT BOTH AT THE SAME TIME. When I have them both connected, disconnections occur all the time (either the mouse or the keyboard, apparently at random).
Tried to run Bluetooth Updater 1.3.3 but the thing tells me that there is no Bluetooth device to update. I suppose it is loooking for a DBT-120 and I have a DBT-122.
Anyone with a suggestion on anything I should try to have both my mouse and keyboard working via my new bluetooth adpater?
(No use to contact D-Link support, they don't know anything about Macs and the only thing they have been instructed to respond is 'its an Apple problem'. And they charge you for that - the hotline is expensive!)
Cheers

Hi,
i'm having the same problem. The Apple Store recommends purchasing the D-Link DBT-120, but doesn't actually sell it since it has been superceded by the DBT-122 in Europe. Apple should know this. While D-Link market the DBT-122 as the replacement for the DBT-120 that is also compatible with Macs, from what i have been able to find out the 120 and the 122 use different chipsets and OSX cannot recognize all the features of the DBT-122's firmware. That is also why OSX's firmware updater software doesn't work with the DBT-122.
Like you, i can get the DBT-122 to work with either the keyboard or mouse but not both at the same time.
In any case even if you got both the keyboard and mouse working wirelessly there would be no way of waking the computer from sleep since the 'allow bluetooth device to wake computer from sleep' option is greyed out - this is only available if the firmware is supported. Presumably Apple will have to release software to support the DBT-122, if the earlier model is no longer in production. I think both Apple and D-Link are at fault here.

How to make OAS use SSL

I'm trying to install SSL under OAS 3.0.0.
There's a note in a documentation, that I can generate a request for CA by genreq utility. I can't find it. Where's it placed and does it exist at all?
Can i use request generators from other web servers(IIS, ...)?

I'm trying to install SSL under OAS 3.0.0.
There's a note in a documentation, that I can generate a request for CA by genreq utility. I can't find it. Where's it placed and does it exist at all?
Can i use request generators from other web servers(IIS, ...)?

How to configure sso with SSL step by step

Purpose
In this document, you can learn how to configure SSO with SSL. After user have certificate installed in browser, he can login without input username and password.
Overview
In this document we will demonstrate:
1. How to configure OHS support SSL
2. How to Register SSO with SSL
3. Configure SSO for certificates
Prerequisites
Before start this document, you should have:
1. Oracle AS 10g infrastructure installed (10.1.2)
2. OCA installed
Note:
1. “When you install Oracle infrastructure, please make sure you have select OCA.
2. How Certificate-Enabled Authentication Works:
a. The user tries to access a partner application.
b. The partner application redirects the user to the single sign-on server for authentication. As part of this redirection, the browser sends the user's certificate to the login URL of the server (2a). If it is able to verify the certificate, the server returns the user to the requested application.
c. The application delivers content. Users whose browsers are configured to prompt for a certificate-store password may only have to present this password once, depending upon how their browser is configured. If they log out and then attempt to access a partner application, the browser passes their certificate to the single sign-on server automatically. This means that they never really log out. To effectively log out, they must close the browser.
Enable SSL on the Single Sign-On Middle Tier
The following steps involve configuring the Oracle HTTP Server. Perform them on the single sign-on middle tier. In doing so, keep the following in mind:
l You must configure SSL on the computer where the single sign-on middle tier is running.
l You are configuring one-way SSL.
l You may enable SSL for simple network encryption; PKI authentication is not required. Note though that you must use a valid wallet and server certificate. The default wallet location is ORACLE_HOME/Apache/Apache/conf/ssl.wlt/default.
1. Back up the opmn.xml file, found at ORACLE_HOME/opmn/conf
2. In opmn.xml, change the value for the start-mode parameter to ssl-enabled. This parameter appears in boldface in the xml tag immediately following.
<ias-component id="HTTP_Server">
<process-type id="HTTP_Server" module-id="OHS">
<module-data>
<category id="start-parameters">
<data id="start-mode" value="ssl-enabled"/>
</category>
</module-data>
<process-set id="HTTP_Server" numprocs="1"/>
</process-type>
</ias-component>
3. Update the distributed cluster management database with the change: ORACLE_HOME/dcm/bin/dcmctl updateconfig -ct opmn
4. Reload the modified opmn configuration file:
ORACLE_HOME/opmn/bin/opmnctl reload
5. Keep a non-SSL port active. The External Applications portlet communicates with the single sign-on server over a non-SSL port. The HTTP port is enabled by default. If you have not disabled the port, this step requires no action.
6. Apply the rule mod_rewrite to SSL configuration. This step involves modifying the ssl.conf file on the middle-tier computer. The file is at ORACLE_HOME/Apache/Apache/conf. Back up the file before editing it.
Because the Oracle HTTP Server has to be available over both HTTP and HTTPS, the SSL host must be configured as a virtual host. Add the lines that follow to the SSL Virtual Hosts section of ssl.conf if they are not already there. These lines ensure that the single sign-on login module in OC4J_SECURITY is invoked when a user logs in to the SSL host.
<VirtualHost ssl_host:port>
RewriteEngine on
RewriteOptions inherit
</VirtualHost>
Save and close the file.
7. Update the distributed cluster management database with the changes:
ORACLE_HOME/dcm/bin/dcmctl updateconfig -ct ohs
8. Restart the Oracle HTTP Server:
ORACLE_HOME/opmn/bin/opmnctl stopproc process-type=HTTP_Server
ORACLE_HOME/opmn/bin/opmnctl startproc process-type=HTTP_Server
9. Verify that you have enabled the single sign-on middle tier for SSL by trying to access the OracleAS welcome page, using the format https://host:ssl_port.
Reconfigure the Identity Management Infrastructure Database
Change all references of http in single sign-on URLs to https within the identity management infrastructure database. When you change single sign-on URLs in the database, you must also change these URLs in the targets.xml file on the single sign-on middle tier. targets.xml is the configuration file for the various "targets" that Oracle Enterprise Manager monitors. One of these targets is OracleAS Single Sign-On.
1. Change Single Sign-On URLs
Run the ssocfg script, taking care to enter the command on the computer where the single sign-on middle tier is located. Use the following syntax:
UNIX:
$ORACLE_HOME/sso/bin/ssocfg.sh protocol host ssl_port
Windows:
%ORACLE_HOME%\sso\bin\ssocfg.bat protocol host ssl_port
In this case, protocol is https. (To change back to HTTP, use http.) The parameter host is the host name, or server name, of the Oracle HTTP listener for the single sign-on server.
Here is an example:
ssocfg.sh https login.acme.com 4443
2. Restart OC4J_SECURITY instance and verify the configuration
To determine the correct port number, examine the ssl.conf file. Port 4443 is the port number that the OracleAS installer assigns during installation.
If you run ssocfg successfully, the script returns a status 0. To confirm that you were successful, restart the OC4J_SECURITY instance:
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=OC4J_SECURITY
Then try logging in to the single sign-on server at its SSL address:
https://host:ssl_port/pls/orasso/
 3. Back up the file targets.xml:
cp ORACLE_HOME/sysman/emd/targets.xml ORACLE_HOME/sysman/emd/targets.xml.backup
4. Open the file and find the target type oracle_sso_server. Within this target type, locate and edit the three attributes that you passed to ssocfg:
· HTTPMachine—the server host name
· HTTPPort—the server port number
· HTTPProtocol—the server protocol
If, for example, you run ssocfg like this:
ORACLE_HOME/sso/bin/ssocfg.sh http sso.mydomain.com:4443
Update the three attributes this way:
<Property NAME="HTTPMachine" VALUE="sso.mydomain.com"/>
<Property NAME="HTTPPort" VALUE="4443"/>
<Property NAME="HTTPProtocol" VALUE="HTTPS"/>
5.Save and close the file.
6. Reload the OracleAS console:
 ORACLE_HOME/bin/emctl reload
7. Issue these two commands:
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=HTTP_Server
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=OC4J_SECURITY
Registering mod_osso
1. This command sequence that follows shows a mod_osso instance being reregistered with the single sign-on server.
$ORACLE_HOME/sso/bin/ssoreg.sh
 -oracle_home_path $ORACLE_HOME
 -config_mod_osso TRUE
 -mod_osso_url https://myhost.mydomain.com:4443
2. Restarting the Oracle HTTP Server
After running ssoreg, restart the Oracle HTTP Server:
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=HTTP_Server
Configuring the Single Sign-On System for Certificates
1. Configure policy.properties with the Default Authentication Plugin
Update the DefaultAuthLevel section of the policy.properties file with the correct authentication level for certificate sign-on. This file is at ORACLE_HOME/sso/conf. Set the default authentication level to this value:
DefaultAuthLevel = MediumHighSecurity
Then, in the Authentication plugins section, pair this authentication level with the default authentication plugin:
MediumHighSecurity_AuthPlugin = oracle.security.sso.server.auth.SSOX509CertAuth
2. Restart the Single Sign-On Middle Tier
After configuring the server, restart the middle tier:
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=HTTP_Server
ORACLE_HOME/opmn/bin/opmnctl restartproc process-type=OC4J_SECURITY
Bringing the SSO Users to OCA User Certificate Request URL
The OCA server reduces the administrative and maintenance cost of provisioning a user certificate. The OCA server achieves this by authenticating users by using OracleAS SSO server authentication. All users who have an Oracle AS SSO server account can directly get a certificate by using the OCA user interface. This reduces the time normoally requidred to provision a certificate by a certificate authority.
The URL for the SSO certificate Request is:
https://<Oracle_HTTP_host>:<oca_ssl_port>/oca/sso_oca_link
You can configure OCA to provide the user certificate request interface URL to SSO server for display whenever SSO is not using a sertificate to authenticate a user. After the OracleAS SSO server authenticates a user, it then display the OCA screen enabling that user to request a certificate.
To link the OCA server to OracleAS SSO server, use the following command:
ocactl linksso
opmnctl stoproc type=oc4j instancename=oca
opmnctl startproc type=oc4j instancename=oca
You also can use ocactl unlinksso to unlink the OCA to SSO.

I have read the SSO admin guide, and performed the steps for enabling SSL on the SSO, and followed the steps to configure mod_osso with virtual host on port 4443 as mentioned in the admin guide.
The case now is that when I call my form (which is developed by forms developer suite 10g and deployed on the forms server which is SSO enabled) , it calls the SSO module on port 7777 using http (the default behaviour).
on a URL that looks like this :
http://myhostname:7777/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken=.......
and gives the error :
( Forbidden
You don't have permisission to access /sso/auth on this server at port 7777)
when I manually change the URL to :
https://myhostname:4443/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken=.......
the SSO works correctly.
The question is :
How can I change this default behaviour and make it call SSO on port 4443 using https instead ?
Any ideas ?
Thanks in advance

How to make tables similar to apple site?

Is anyone aware of any tutorials on how to make tables
similar to
http://www.apple.com/support/leopard/
Thanks!

Look at the code.
Murray --- ICQ 71997575
Adobe Community Expert
(If you *MUST* email me, don't LAUGH when you do so!)
==================
http://www.projectseven.com/go
- DW FAQs, Tutorials & Resources
http://www.dwfaq.com - DW FAQs,
Tutorials & Resources
==================
"Mike" <[email protected]> wrote in message
news:[email protected]..
> Is it all CSS? How is it being done? Anyone point me to
some tutorials?
>
> Thanks.
>
> Ken Binney wrote:
>> And then you will discover there are no tables in
that layout.
>>
>>
>>
>>
>> "John T Smith" <[email protected]>
wrote in message
>> news:g0ichc$64f$[email protected]..
>>> While at that site, tell your browser to show
you the code... in IE that
>>> is
>>> click on the View option and select source
>>>
>>> You may also do a File--Save As to save a copy
of the code to your
>>> computer to
>>> view
>>>
>>

HT4623 How to make face call on iPad

How to make video calling

Using FaceTime
http://support.apple.com/kb/ht4319
Troubleshooting FaceTime
iOS http://support.apple.com/kb/TS3367

How to make a website like this

Does anyone know a good publication or training DVD that will
quickly teach me how to make websites like this:
http://blusites.com/adam/
I've been taking a flash course through a local college and
all they teach me is how to do stupid animal animations, animated
gifs etc... I'm dropping the class hoping that I can teach myself
and not waste anymore time
Thanks!

Personally, why pay to view linda.com videos when you can
access all the videos you could want for free at
http://www.adobe.com/designcenter/video_workshop/
I'm not crazy about the videos anywhere because I might have
to watch them again and again, but some of the videos have a
tutorial and a file to download.
If you're the type that you like to do all you can before
going to a forum, then you can do these things:
1. I don't know if you have Adobe Creative Suite 3, but if
you want to make websites with flash, you will need the program.
2. I like the flash movie at
http://blusites.com/adam/blu1.swf,
but believe it or not, it's a very simple movie. The photographs
are supplied by a professional photographer, and the flash movie is
simple.
3. If you already know how to make movies using Flash, then
get yourself an Advanced Flash book to to learn faster and become a
better flash creator. Flash CS3 uses ActionScript 2.0 and 3.0. You
might like to get a book on ActionScript 3.0 to learn faster.
You can and will learn faster and better if you take the time
to do 2. and 3.
There is a ton of Flash Tutorials at Adobe and other
websites, do a search and you'll get so many sites it could take
years to visit them all.
good luck, hope this helps
jan

HT5625 how to make apple id?

how to make apple id?

https://appleid.apple.com/cgi-bin/WebObjects/MyAppleId.woa/wa/createAppleId?loca lang=en_US

How to make SSL supporting configuration

Dear Friends,
I got the following exception once when my connection routes through SSL, ie., https
Kindly convey do i need any specific configuration needed to support SSL.
java.lang.ExceptionInInitializerError
 at java.lang.Class.forName0(Native Method)
 at java.lang.Class.forName(Unknown Source)
 at java.net.URL.getURLStreamHandler(Unknown Source)
 at java.net.URL.<init>(Unknown Source)
 at java.net.URL.<init>(Unknown Source)
 at java.net.URL.<init>(Unknown Source)
 at com.adventnet.nms.util.NmsClientUtil.constructURL(NmsClientUtil.java:4004)
 at com.adventnet.nms.util.NmsClientUtil.getTimeToLiveToken(NmsClientUtil.java:3914)
 at com.adventnet.nms.startclient.WebNMSClient.doconnect(WebNMSClient.java:649)
 at com.adventnet.nms.startclient.WebNMSClient.run(WebNMSClient.java:2132)
 at java.lang.Thread.run(Unknown Source)
Caused by: java.security.AccessControlException: access denied (java.security.SecurityPermission putProviderProperty.SUN)
 at java.security.AccessControlContext.checkPermission(Unknown Source)
 at java.security.AccessController.checkPermission(Unknown Source)
 at java.lang.SecurityManager.checkPermission(Unknown Source)
 at java.lang.SecurityManager.checkSecurityAccess(Unknown Source)
 at java.security.Provider.check(Unknown Source)
 at java.security.Provider.put(Unknown Source)
 at com.sun.javaws.WinBrowserSupport.getSecureRandomImpl(Unknown Source)
 at com.sun.javaws.BrowserSupport.getSecureRandom(Unknown Source)
 at com.sun.javaws.net.protocol.https.Handler.<clinit>(Unknown Source)
 ... 11 more

What version of Java Web Start and J2SE are you using ?
/Dietz

How to make tomcat 5 support SSL (https)?

Similar Messages

Maybe you are looking for