Re: RE Tomcat and SSL

2006-04-14 Thread Franck UB
Hi Klaus, > coming back to my issue: How can I make sure that my certificate is > right for tomcat? Could I attach it at one of these eMails? Or are > attachments not allowed? Could you test it? I think this could be one solution. Today I am not in office. But you can send your stuff to [EMAI

Re: RE Tomcat and SSL

2006-04-13 Thread Klaus-F. Kaal
Hi Franck, coming back to my issue: How can I make sure that my certificate is right for tomcat? Could I attach it at one of these eMails? Or are attachments not allowed? Could you test it? Would be great. Thanks Klaus Klaus-F. Kaal schrieb: Franck, I changed that and restartet Tomcat.

Re: RE Tomcat and SSL

2006-04-13 Thread Klaus-F. Kaal
Franck, I changed that and restartet Tomcat. No different reading in the logs Klaus Franck Borel schrieb: Does that tell you more? Not really. But I think you must augment the debug value to 99: Better? -- Franck --

Re: RE Tomcat and SSL

2006-04-13 Thread Franck Borel
Does that tell you more? Not really. But I think you must augment the debug value to 99: Better? -- Franck - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: RE Tomcat and SSL

2006-04-13 Thread Klaus-F. Kaal
Hi Franck, yes, I am using Java 1.5 ONLY I fitted in the catalina.sh the statement you suggested. In my opinion, it didn't change anything in the log. This now looks like this: --- 13.04.2006 14:00

Re: RE Tomcat and SSL

2006-04-13 Thread Franck Borel
Another suggestion: Be sure that you are using only one Java version and that this version is > 1.4.1 (there is a known bug with this version if you use it with JSSE). Another idea is to use the -Djavax.net.debug=all flag. I never try this, but it should help you to get more information about

Re: RE Tomcat and SSL

2006-04-13 Thread Klaus-F. Kaal
Franck, I suspect that my way of creating the key could be the problem. Do you have an idea where I could find a "dummy" key for just checking, my key is not the problem. It should be a key which is already working with tomcat. Thanks Klaus Klaus-F. Kaal schrieb: Yes, Franck, I am "root

Re: RE Tomcat and SSL

2006-04-13 Thread Klaus-F. Kaal
Yes, Franck, I am "root" when I run key-creation and tomcat... Franck Borel schrieb: Next suggestion: Did you make the key as root? And do you start Tomcat as root? -- Franck Yes, in testphase, I do all pw's in low-cases... Franck Borel schrieb: Hi Klaus, Good Morning Franck, yesterday

Re: RE Tomcat and SSL

2006-04-13 Thread Franck Borel
Next suggestion: Did you make the key as root? And do you start Tomcat as root? -- Franck Yes, in testphase, I do all pw's in low-cases... Franck Borel schrieb: Hi Klaus, Good Morning Franck, yesterday, you did a great job, trying to help me. I appreciate that! Thanks. But... I am runn

Re: RE Tomcat and SSL

2006-04-13 Thread Klaus-F. Kaal
Yes, in testphase, I do all pw's in low-cases... Franck Borel schrieb: Hi Klaus, Good Morning Franck, yesterday, you did a great job, trying to help me. I appreciate that! Thanks. But... I am running out of ideas. Regarding the password: presently, I am using "changeit" for everything (

Re: RE Tomcat and SSL

2006-04-13 Thread Franck Borel
Hi Klaus, Good Morning Franck, yesterday, you did a great job, trying to help me. I appreciate that! Thanks. But... I am running out of ideas. Regarding the password: presently, I am using "changeit" for everything (just to get in running), but I still have no success. Yesterday, I sent an

Re: RE Tomcat and SSL

2006-04-12 Thread Klaus-F. Kaal
Good Morning Franck, yesterday, you did a great job, trying to help me. I appreciate that! But... I am running out of ideas. Regarding the password: presently, I am using "changeit" for everything (just to get in running), but I still have no success. Yesterday, I sent anouther eMail explaini

Re: RE Tomcat and SSL

2006-04-12 Thread Franck Borel
Hi Klaus, Hi Franck, still tomcat moans that the keystore was tampered or password was incorrect. I am not sure about the password. With all questions, I gave my own and allways the same. Was that correct? Yes, use your own password. 'Changeit' is only an example which is principally used f

Re: RE Tomcat and SSL

2006-04-12 Thread Min Huang
Awesome. I had spent like 3 hours fiddling with Tomcat and SSL. I followed the directions at http://tomcat.apache.org/tomcat-5.0-doc/ssl-howto.html, but it turns out if you include the className attribute, you'll get an InvocationTargetException and Tomcat will fail to start =( So make sure yo

Re: RE Tomcat and SSL

2006-04-12 Thread Klaus-F. Kaal
Hi, thank you very much for all your effords, but it still does'nt work. That is what I do: CREATE KEY: -- ../../java/bin/keytool -genkey -alias tomcat -keyalg RSA -keystore /opt/wt24/apache-to

Re: RE Tomcat and SSL

2006-04-12 Thread tschaeffer
"Klaus-F. Kaal" <[EMAIL PROTECTED]> wrote on 04/12/2006 11:11:16 AM: > Hi Franck, still tomcat moans that the keystore was tampered or password > was incorrect. > > I am not sure about the password. With all questions, I gave my own and > allways the same. Was that correct? > > Klaus > > >

Re: RE Tomcat and SSL

2006-04-12 Thread Klaus-F. Kaal
Hi Franck, still tomcat moans that the keystore was tampered or password was incorrect. I am not sure about the password. With all questions, I gave my own and allways the same. Was that correct? Klaus Franck Borel schrieb: Sorry to disturb you again, but all the entries in my server.xm

Re: RE Tomcat and SSL

2006-04-12 Thread Franck Borel
Sorry to disturb you again, but all the entries in my server.xml do not seem to be the problem. *At present, TOMCAT states, that my .keystore was tampered or my password was incorrect.* But I did everything over and over again, and right! My trouble is that there are lots of descriptions o

Re: RE Tomcat and SSL

2006-04-12 Thread Klaus-F. Kaal
Sorry to disturb you again, but all the entries in my server.xml do not seem to be the problem. *At present, TOMCAT states, that my .keystore was tampered or my password was incorrect.* But I did everything over and over again, and right! My trouble is that there are lots of descriptions of

Re: RE Tomcat and SSL

2006-04-12 Thread Franck Borel
Hi Klaus, Hi Franck, thank you for your hint. But I am not sure, which parameter is which file. To make things clear, here my procedure: > openssl req -x509 -newkey rsa:512 -keyout ./demoCA/private/cakey.pem -out ./dem

Re: RE Tomcat and SSL

2006-04-12 Thread Klaus-F. Kaal
Hi Franck, thank you for your hint. But I am not sure, which parameter is which file. To make things clear, here my procedure: > openssl req -x509 -newkey rsa:512 -keyout ./demoCA/private/cakey.pem -out ./demoCA/cacert.pe

Re: RE Tomcat and SSL

2006-04-12 Thread Franck Borel
Hi, I solved that problem. Now running in a new one: I have changed the file server.xml and set port 8080 to 80. I uncommented the SSL section and configured the port to 443. Now I expect Tomcat to run on port 80 (what is does), and that, when I call the same URL with "https", that it calls

Re: RE Tomcat and SSL

2006-04-12 Thread Klaus-F. Kaal
Hi, I solved that problem. Now running in a new one: I have changed the file server.xml and set port 8080 to 80. I uncommented the SSL section and configured the port to 443. Now I expect Tomcat to run on port 80 (what is does), and that, when I call the same URL with "https", that it calls

RE RE Tomcat and SSL

2006-04-12 Thread Denis . COCHET
You should insert you certificate in the cacerts keystore of your jdk. "Klaus-F. Kaal" <[EMAIL PROTECTED]