SSL and tomcat

how can i configure tomcat to run with SSL? any ideas?

here you are - http://jakarta.apache.org/tomcat/tomcat-3.3-doc/tomcat-ssl-howto.html

Similar Messages

SSL and Tomcat Conf. Ques

Hi Guys,
I really need your quick help...I am trying to configure SSL in Tomcat...I am using Tomcat 4.1 and JDK 1.4... I did all the steps mentioned on the below page...
http://tomcat.apache.org/tomcat-4.0-doc/ssl-howto.html
and my server.xml file is like this...

    <Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
               port="8443" minProcessors="5" maxProcessors="75"
               enableLookups="true"
            acceptCount="100" debug="0" scheme="https" secure="true"
               useURIValidationHack="false" disableUploadTimeout="true">
                <Factory className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory"
               clientAuth="true" protocol="TLS" />
    </Connector>I copied all the JAR files (from JSSE) in JAVA_home/jre/lib/ext...set all the path in classpath..
JSSE_home is set in Environment Variables
I restarted the server and type the following into browser
https://localhost:8443
it says "The page cannot be displayed"
can you please let me know which step I am missing??....
by using %JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA I have created ".keystore" in
C:\Document and Settings\vishu
what do I do now to run my JSP pages on SSL...
when server starts it doesn't give me any error..but I can't see the index page...
but if I am typing https://127.0.0.1:8443/ then it is displaying message about the certificate...and when I press OK button again "The Page can not be displayed" appears.
please help me out...
thanks
vishu

Hi,
thanks for the reply...I know that
https://localhost:8443
https://127.0.0.1:8443
are identical and make no difference...but isn't it strange that if I type
https://localhost:8443 then nothing comes up and if I type
https://127.0.0.1:8443 then one message box appear
Choose a digital certificate
The website you want to view requests identifications..Please choose a certificate ....
but the View Certificate tab is disable...the only option I have is press OK button...and once I press OK button The Page cannot be displayed appears..
can you please help me out...do I need to download any certificate??... how do I solve this thing...
and index.jsp is there in the ROOT folder...
http://127.0.0.1:8080/index.jsp is running fine..
vishu

Problem with ssl and tomcat

Hi to all, I'm trying to do ssl in a intranet. I have tomcat 4.1 and JDK 4.1_02. I have following all steps thats indicate the tomcat ssl documentation, I have copied the jcert.jar jnet.jar and jsse.jar to the directorie jre\lib\ext I have generated the keystore and verisign have sent me the keys. I have modified the server.xml where I have put the new port and the factory tag but I cannot see a page through https.
I have port 8080 that redirects to 8443, which have the scheme=https.
if I put http:\\localhost:8080 appear the tomcat home page.
if I put https:\\localhost:8443 not appear nothing.
if I put http:\\localhost:8443 not appear error but don't show nothing.
I have seen the log of tomcat and appear an exception:
org.apache.commons.digester.Digester error
Parse Error al line 89 column 11: the content element type "web-app" must match (icon?,display-name?....
this exception don't appear previously,it seems that is a problem of xerces.
Any idea or help it is welcome.
THANKS.

Obviously you have a syntax error in your one of your .xml files. Most likely in either the global web.xml or the application specific one.

Java and Tomcat SSL

I have a java swing application that implements a servlet using Tomcat. I want to be able to encrypt the data being sent to Tomcat and vice versa and I wasn't exactly sure of the process. Would I just use HTTPS from the client side and configure SSL on Tomcat? Any help would be great.
Thanks in advance.

Yes, using ssl is the best/simplest option.

How to test SSL in tomcat

hi,
i need to test whether the SSL in tomcat is secure or not. i need to show some evidence to my supervisor that SSL did encrypt data during transmission.
therefore, my plan is to sniff out some packet from SSL to show the encrypted data to my supervisor. but i do not know which is the best sniffer tools to help me to do this.
could anyone suggest me which is the best tool? and how to do it?
thanks
eric

If you're on linux, try ssldump. If you're on windows, try ethereal.

How do I bind to directory server with SSL and authentication?

I'm running Lion Server 10.7.3, Open Directory master. In Open Directory/Settings/LDAP, I've checked the box to Enable SSL and selected a (self-signed) certificate. In Policies/Binding, I've checked the box to Enable Authenticated Directory Binding.
Testing with a client computer on which Snow Leopard has been freshly installed and fully updated, I went to System Prefs/Accounts to bind to the new directory server. The good news is, the binding was successful, and when the client initiates an AFP connection with the server, it uses Kerberos, creating a ticket as expected. (Which doesn't work with Lion clients, alas, but that's a seperate matter.)
Here are the problems:
1) It looks like the binding did not use SSL. By which I mean that when I opened Directory Utility and examined the LDAPv3 entry, the SSL checkbox was not checked. (If I then check the box, everything looks fine until I restart the client, after which I have a red dot. So I'm guessing that checking the box does nothing until after restart, and that it breaks the binding.)
2) I was never prompted to authenticate for the directory binding.
So I get that literally I'm *enabling* SSL and Authenticated Directory Binding, but it seems like the defaults are to bind without SSL or authentication, and there's no obvious-to-me way to force the binding to use those things. How do I do that?
What I'd really like to do is *require* SSL and Authenticated Directory Binding. I want this because my belief (correct me if I'm wrong) is that if authentication is required to bind to the server, no one will be able to bind to my server without my permission, and that SSL offers a more secure connection to my server than not-SSL. How do I require these things, or do I not really want to?
Thank you.

You cannot connect to databases via Muse at the moment. Please refer: http://forums.adobe.com/message/5090145#5090145
Cheers,
Vikas

Communication problem between NetBeans and Tomcat

hi!
i got a quite mysterious problem. here is what happens:
- i start NetBeans 5.5.1 (the first time)
- i want to debug my JSF-Project, the Debugger starts
- After a few seconds the debugger waits for tomcat (it sais: "Waiting for Tomcat...") and tomcat starts
- Again after a few seconds the tomcat-debugger-output sais "Tomcat startet in 3333 ms".
okay.
when i enter http://localhost:8084/ in my browser i get the tomcat homepage, so the server has definitely started! But nothing happens in NetBeans and nothing happens with my project....
In the lower-right corner i see this blue working-bar that sais "deploying project" but nothing happens. The Project-Debugger-Output still sais "Waiting for Tomcat..." but nothing happens...
And after something around 3 minutes (i guess it's a timeout) i get the error "Starting of Tomcat failed." But is HAS started, i can login to the Administration-Area in my browser!
so i guess there is a communication problem between netbeans an tomcat. Netbeans waits for a message from tomcat but tomcat doesn't send it..or netbeans doesn't understand it.
But the story goes on:
When i press the debug-button a second time it takes only a few seconds till i get the message: "Tomcat server port 8084 already in use". OF COURSE! Because Tomcat has already startet and can't be stoped by NetBeans.
i'm trying to solve this problem for 4 days now, so i would be very happy if anyone has an idea where to start/continue the search...
thanks,
flo.
some system-info:
- windows vista business 32-bit
- no firewall is running
- AntiVir Personal Edition IS running
- Yahoo Widgets Engine IS running
- no other software is running
and finally the tomcat-log:
Using CATALINA_BASE: C:\Users\Administrator\.netbeans\5.5.1\apache-tomcat-5.5.17_base
Using CATALINA_HOME: C:\Program Files\NetBeans\enterprise3\apache-tomcat-5.5.17
Using CATALINA_TMPDIR: C:\Users\Administrator\.netbeans\5.5.1\apache-tomcat-5.5.17_base\temp
Using JRE_HOME: C:\Program Files\Java\jdk1.5.0_12
Listening for transport dt_shmem at address: tomcat_shared_memory_id
21.09.2007 18:27:50 org.apache.catalina.core.AprLifecycleListener lifecycleEvent
INFO: The Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: C:\Program Files\Java\jdk1.5.0_12\bin;.;C:\Windows\system32;C:\Windows;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\ThinkPad\ConnectUtilities;C:\Program Files\Common Files\Teleca Shared;C:\Program Files\Common Files\Adobe\AGL;C:\Program Files\MySQL\MySQL Server 5.0\bin;C:\Program Files\cvsnt;
21.09.2007 18:27:50 org.apache.coyote.http11.Http11BaseProtocol init
INFO: Initializing Coyote HTTP/1.1 on http-8084
21.09.2007 18:27:50 org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 1862 ms
21.09.2007 18:27:50 org.apache.catalina.core.StandardService start
INFO: Starting service Catalina
21.09.2007 18:27:50 org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/5.5.17
21.09.2007 18:27:50 org.apache.catalina.core.StandardHost start
INFO: XML validation disabled
21.09.2007 18:27:53 org.apache.coyote.http11.Http11BaseProtocol start
INFO: Starting Coyote HTTP/1.1 on http-8084
21.09.2007 18:27:54 org.apache.jk.common.ChannelSocket init
INFO: JK: ajp13 listening on /0.0.0.0:8009
21.09.2007 18:27:54 org.apache.jk.server.JkMain start
INFO: Jk running ID=0 time=0/31 config=null
21.09.2007 18:27:54 org.apache.catalina.storeconfig.StoreLoader load
INFO: Find registry server-registry.xml at classpath resource
21.09.2007 18:27:54 org.apache.catalina.startup.Catalina start
INFO: Server startup in 3626 ms

As i wrote before, the same problem occured for me. I have found a solution which is : Go to tools menu and then select options . In the proxy info, select No Proxy.
I hope this help you

Problem launching a jsp page with eclipse and tomcat

Hi,
I have just started using eclipse and tomcat for creating dynamic web pages. I tried to launch a jsp page after starting the tomcat server with the URL: http://locahost:8080/HelloWorld/, an error page was displayed as below:
HTTP Status 404 -/
type Status report
message /_
description The requested resource (-) is not available
Apache Tomcat/5.5.17
I didn't get any error at the console and when i just typed http://localhost, a pop up menu saying that the connection was refused when attempting to contact localhost.
I'm not sure what is the problem here. Could it be the permssion to the localhost is not granted by the system as the eclipse IDE is running using linux?
Hope someone can help.
Thanks.

http://www-128.ibm.com/developerworks/library/os-ectom/

Right problem with apache and tomcat

Bonjour;
I use a user login "apache" to stop/start Apache and tomcat. Because never launching apache et tomcat as root.
But I have the following problem with apache (file error.log) :
[Tue May 6 17:26:22 2003] [error] Connection "warpConnection" cannot connect
[Tue May 6 17:26:22 2003] [error] Cannot open connection "warpConnection"
[Tue May 6 17:27:01 2003] [error] Re-Trying to deploy connections
As root the error msg does'nt exists (lost)
Best regards;
A+;

Run it from the shell to see whats wrong:
# httpd

Authentication problem with JWS and TOMCAT

Hi everyone !
I have a problem with Java Web Start (1.0.1) and Tomcat (4.0.4).
I'm trying to call my application via Web server Tomcat with restricting access.
My configuration is the following :
The deployment descriptor web.xml is:
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE web-app
PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
"http://java.sun.com/dtd/web-app_2_3.dtd">
<web-app>
<mime-mapping>
<extension>jar</extension>
<mime-type>application/java-archive</mime-type>
</mime-mapping>
<mime-mapping>
<extension>java</extension>
<mime-type>text/plain</mime-type>
</mime-mapping>
<mime-mapping>
<extension>jnlp</extension>
<mime-type>application/x-java-jnlp-file</mime-type>
</mime-mapping>
<mime-mapping>
<extension>JNLP</extension>
<mime-type>application/x-java-jnlp-file</mime-type>
</mime-mapping>

<security-constraint>
<web-resource-collection>
<web-resource-name>Entire Application</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<auth-constraint>

<role-name>standard</role-name>
</auth-constraint>
</security-constraint>

<login-config>
<auth-method>BASIC</auth-method>
<realm-name>MY APPL</realm-name>
</login-config>
</web-app>
And jnlp File is:
<jnlp
spec="1.0+"
codebase="http://host:8080/Official/"
href="Application.jnlp">
<information>
<title>Application release 0.10</title>
<vendor> XXXX </vendor>
<homepage href="/"/>
<description>Application</description>
<description kind="short">My Application</description>
<icon href="Icon.gif"/>
</information>
<security>
<all-permissions/>
</security>
<resources>
<j2se version="1.3"/>
<jar href="Jar1.jar"/>
<jar href="Jar2.jar"/>
<jar href="Jar3.jar"/>
<jar href="Jar4.jar"/>
<jar href="Jar5.jar"/>
<jar href="Jar6.jar"/>
<jar href="Jar7.jar"/>
<jar href="Jar8.jar"/>
<jar href="Jar9.jar"/>
<jar href="Jar10.jar"/>
<jar href="MyApplication.jar"/>
</resources>
<application-desc main-class="com.xxxx.tool.cm.MyApplication"/>
</jnlp>
With the above configuration the Java Web Start not work.
I'm expecting the message box for insert username and password instead it returns the messagge error :
An error occurred while launching/running the application.
Vendor: XXXX
Category: Download Error
Unable to load resource: http://host:8080/Official/Application.jnlp
The Exception error is:
JNLPException[category: Download Error : Exception: java.lang.NullPointerException : LaunchDesc: null ]
     at com.sun.javaws.cache.DownloadProtocol.doDownload(Unknown Source)
     at com.sun.javaws.cache.DownloadProtocol.isLaunchFileUpdateAvailable(Unknown Source)
     at com.sun.javaws.LaunchDownload.getUpdatedLaunchDesc(Unknown Source)
     at com.sun.javaws.Launcher.downloadResources(Unknown Source)
     at com.sun.javaws.Launcher.handleApplicationDesc(Unknown Source)
     at com.sun.javaws.Launcher.handleLaunchFile(Unknown Source)
     at com.sun.javaws.Launcher.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)
I have tried to remove the restrict access in the deployment descriptor (web.xml) and java Web Start WORKS !!!!!!
I'll appreciate any idea or hint!
Thanks in advance

Check this out
http://forum.java.sun.com/thread.jsp?forum=38&thread=456250
Mad Einstein

Why do I need to restart Apache and Tomcat every time a java file is change

If a java file is changed and complied the changes are not reflected if Tomcat is not restarted.
The settings in server.xml are as:

<Context path="/manager" docBase="manager" debug="0" privileged="true"/>
<Context path="/cf" docBase="cf" debug="0" reloadable="false"/>
Here "cf" is my Application folder under webapps. The reloadable property when set to "true" for standalone Tomcat on Windows98 reflects the changes for compiled java files without restarting Tomcat. But on Linux 7.1 with Apache 1.3.19 and Tomcat 4.0.3 this is not working.
Also tried out with Manager Application of tomcat-users.xml with reloadable="false" as well as reloadable="true",
But when I reload the application using the command
http://servername:8080/manager/reload?path=/appli.name
It tells me that the application is reloaded but changes in the java file are still not reflected.
Also when reloaded through Manager Servlet, Only my load-on-startup servlet is reloaded, but other java classes are not.
Is it neccessary to execute this reload command from the server itself. I m executing it from a remote m/c. and have mapped the application with a domain name virtually.
Is it the case with Tomcat on Linux with Apache. Or is something going wrong on my part.
Can someone Help out plz.
Regards,
Rupali

or you can "touch" your web.xml file.
touch web.xmlor that command is for *nix systems, not sure what the Windows command is. But basically, when you edit the web.xml, even if it means updating the last modified time, it will restart only your application and you should see the changes.

NetBeans 5.0 and Tomcat 4.1

Hello,
I'm using NetBeans 5.0 and I have been using the Bundled Tomcat version 5.5.9 for my servlet container and everything's been great. Now that I'm ready to push my application up to a web host, I found that my host (lunarpages) runs with Tomcat 4.1 which uses version 2.3 of the servlet container. Tomcat 5.5 uses servlet container 2.4.
So I downloaded Tomcat 4.1 (which has 2.3) and I don't know how to properly tell Netbeans to use it. When I open Server Manager and select 'Add Server', I can't just tell NetBeans to point to my Tomcat 4.1 directory. It wants me to select from a dropdown list of servers and Tomcat 4.1 isn't in the list.
I tried to fake NetBeans out by selecting the 'Tomcat 5' server and pointing to my Tomcat 4.1 directory but I'm getting the following message when I try to run:
FAIL - Unknown command /deploy
C:\workspace\myApp\nbproject\build-impl.xml:425: Deployment error:
Can anyone point me in the right direction on how to get Tomcat 4.1 running with NetBeans 5.0?
Thanks,
Eric

I found that my host (lunarpages) runs with Tomcat 4.1 which uses version 2.3 of the servlet containerPlease read the post before answering, the reasoning is crystal clear.
I don't have a concrete answer to this problem, but I do have a suggestion.
1) You can add your own tomcat server to netbeans. Under the runtime tab you will find servers, if you right click this you can add a server. Use this to manually configure your own server
2) as for the servlet spec problem, when creating a web project setting the java EE version to 1.3 might solve the problem... I can't tell this for sure because I've never done it.

EDSPermissionError(-14120) problems with LDAP, SSL and Directory Utility

Hello everyone,
Apologies for the repost but I think I may have made a mistake by posting this originally in the Installation, Setup and Migration forum instead of the Open Directory forum. At least I think that may be why I didn't receive any responses.
Anyway, I've been trying to get my head around Open Directory and SSL as they are implemented in Mac OS X Server 10.5 Leopard, and have been having a few issues. I would like to set up a secure internal infrastructure based around a local Certificate Authority that signs certificates for other internal services like LDAP, email, websites, etc.
I only have one Mac OS X Server and it is kind of a small office so I have gone against best practice and simply made it a CA (through Keychain Utility). I then generated a self-signed SSL certificate through Server Admin, and used the "Generate CSR" option to create a Certificate Signing Request. This went fine, but I did have some problems signing it with the CA, because the server documentation suggested that once I signed it it would pop open a Mail message containing the ASCII version of the signed certificate - it did not, and it took me a loooong time to realize that I could simply export the copy of the signed certificate it put in my local Keychain on the server as a PEM file and paste this back into the "Add Signed or Renewed Certificate from Certificate Authority" dialog box in Server Admin. Hopefully this can be fixed in a forthcoming patch, but I thought I would mention it here in case anyone else is stuck on this issue.
Once I did this I was able to use this certificate in the web server on the same machine and sure enough I was able to connect to it with with clients who had installed the CA certificate in their system Keychains without getting any error messages - very cool.
However, I haven't had quite as much luck getting it going with LDAP/Open Directory. I installed the certificate there as well, but have run into a number of problems. At first I could not get clients (also running 10.5.2) to talk to the server at all over SSL, receiving an error in Directory Utility that the server did not support SSL. I eventually discovered that the problem seemed to lie in the fact that the OpenLDAP implementation on Leopard is not tied in with the system Keychain, necessitating some command-line voodoo to install a copy of the CA cert in a local directory and point /etc/openldap/ldap.conf at it, as documented here: http://www.afp548.com/article.php?story=20071203011158936
This allowed me to do an ldapsearch command over SSL, and seemingly turn SSL on on clients that were previously bound to the directory, and additionally allowed me to run Directory Utility on new clients and put in the server name with the SSL box checked and begin to go through the process of binding. Once this seemed to work, I turned off all plaintext LDAP communication and locked down the service by checking the "Enable authenticated directory binding," "Require authenticated binding," "Disable clear text passwords," and "Encrypt all packets" options in Server Admin. However, I am now running into a new problem, specifically that I cannot successfully bind a local account to a directory account over SSL.
Here's what happens:
1) I run Directory Utility, (or it auto-runs) and add a server, typing in the DNS name and clicking the SSL box.
2) I get asked to authenticate, and type in user credentials, including computer name (incidentally, should this be a FQDN or just a hostname?)
3) Provided I put admin credentials in here and not user-level credentials, I get taken to the "Do you want to set up Mail, VPN, etc.?" box that normally appears when you autodiscover or connect to an Open Directory server.
4) I click through, and am asked for a username and password on the server, as well as the password for my local account.
5) When I put this information in, I get a popup with the dreaded "eDSPermissionError(-14120)" and it fails.
Checking the logs in Server Admin reveals nothing special, and while I have seen a couple other threads on this error and various other binding problems:
http://discussions.apple.com/thread.jspa?messageID=5967023
http://discussions.apple.com/message.jspa?messageID=5982070
these have not solved the problem. In the Open Directory user name field I am putting the short username. I have tried putting [email protected] and the user's longname but this fails by saying the account does not exist. For some reason it does seem to work if I bind it to the initial admin account I created, but no other user accounts.
If I turn all the encryption stuff off I am able to join just fine, so I am suspecting that the error may lie in some other "under the hood" piece of software that doesn't get the CA trust settings from the Keychain or the ldap.conf file, but I'm stymied as to which piece of software this might be. Does anyone have any clues on what I might be able to do here?
Thanks,
Andrew

Hard to tell what is happening without looking at the application
source, knowing what OS & hardware you're using etc. You might want to
try running with different JVM versions to see if it's actually the VM
that is the problem. If you have a support contract with BEA you could
ask support to help you diagnose this.
Regards,
/Helena
Ayub Khan wrote:
I have an application running on Weblogic 8.1 ( with JRockit as the JVM). This
application in turns talks to an iPlanet Directory server via LDAP/SSL. The problem
seems to happen on loading the machine..the performance progressively gets worse
and after a couple of seconds, all the threads stop responding. I checked the
heap, cpu and the idle threads in the execute queue and there is nothing there
to trigger alarms...there are quite a few idle threads still and the heap and
the cpu utilization seem OK. On doing a thread dump, Is see that all the other
threads seem to be in a state where they are waiting for data from LDAP and it
is basically read only data that they are waiting on.
Does anyone know what it is going on and help point me in the right direction.
-Ayub

Business Connector problem with SSL and Web Services

Hi,
I have generated a Web Connector Service and tested this in our DEV and QA environment with http and no credentials.
All is fine.
I now switched to SSL and was provided with an https WSDL by our Web Server developers. The Web Connector service generates fine however as soon as I execute the service I get a NumberFormatException. Exact error is:
java.io.IOException:java.lang.NumberFormatException: null
The error occurs in pub.client:http
I traced through the working (in QA) and non-workinfg versions and checked the pipeline prior to the call and can see no different apart from the difference in protocol.
Does anyone have any idea what the cause is? I cannot determine what value is null.
Thanks
Brian

Hi,
I have generated a Web Connector Service and tested this in our DEV and QA environment with http and no credentials.
All is fine.
I now switched to SSL and was provided with an https WSDL by our Web Server developers. The Web Connector service generates fine however as soon as I execute the service I get a NumberFormatException. Exact error is:
java.io.IOException:java.lang.NumberFormatException: null
The error occurs in pub.client:http
I traced through the working (in QA) and non-workinfg versions and checked the pipeline prior to the call and can see no different apart from the difference in protocol.
Does anyone have any idea what the cause is? I cannot determine what value is null.
Thanks
Brian

How to install Java and Tomcat on my VPS

Hello,
I am new in Java.
I would like to install Java and Tomcat on my VPS server.
Do you know which doc or info i should read?
Thanks a lot.
Gil

The free Perian will do it for you automatically.
Additional free new machine setup stuff:
Install and update your Flash here
http://get.adobe.com/flashplayer/
Install Perian (addiitonal Quicktime codecs)
http://perian.org/
Install the Unarchiver (uncompress software)
http://wakaba.c3.cx/s/apps/unarchiver.html
Flip for Mac (for Windows media in Quicktime)
http://www.telestream.net/flip4mac-wmv/overview.htm
VLC (plays anything just about)
http://www.videolan.org/
Easy Find (finds everything on a Mac)
http://www.devon-technologies.com/download/index.html
OnyX (maintenance, cleanup, repair utility)
http://www.titanium.free.fr/

SSL and tomcat

Similar Messages

Maybe you are looking for