DO NOT REPLY [Bug 10212] New: - I can't set up the Coyote Connector to run in HTTPS mode

[bugzilla]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=10212>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=10212

I can't set up the Coyote Connector to run in HTTPS mode

           Summary: I can't set up the Coyote Connector to run in HTTPS mode
           Product: Tomcat 4
           Version: 4.0.4 Final
          Platform: PC
        OS/Version: Windows NT/2K
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: Connector:Coyote HTTP/1.1
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


I can set up the Coyote Adaptor to work in http mode, but if I configure the 
Connector to run in HTTPS mode, then tomcat starts up fine but the browser 
cannot connect to any url in https mode. http works fine. When I comment out my 
coyote setup code and activate my setup code for the old connectors everything 
works. Here are the relevant config lines from the server.xml file.

(I also included an out-commented setup for the old http connector in https 
mode which works fine. By the way, you will also note that for https 
connections I set the attributes maxProcessors and acceptCount to extremely 
high values to make tomcat work within our production system. Otherwise 
Tomcat 4.s.th. rejected some requests when I ran load tests and this behaviour 
also showed up within our production environment under usual load.
Since that time I have not yet run any further tests to verify whether Tomcat 
4.0.4 bahaves differently, but I am also not sure whether this is a bug at all, 
since https connections always maintain a session notion. I also do not quite 
understand the semantics of these two properties and why one property doesn't 
do, although I read the documentation...)

OK. Here is my setup:

    <!-- Define a non-SSL Coyote HTTP/1.1 Connector on port 80 -->
    <Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
               port="80" minProcessors="5" maxProcessors="75"
               enableLookups="true" redirectPort="443"
               acceptCount="10" debug="0" connectionTimeout="60000"/>

    <!-- Define an SSL HTTP/1.1 Connector on port 443 -->
<!--
    <Connector className="org.apache.catalina.connector.http.HttpConnector"
               port="443" minProcessors="5" maxProcessors="750"
               enableLookups="true"
                 acceptCount="100" debug="0" scheme="https" secure="true">
      <Factory className="org.apache.catalina.net.SSLServerSocketFactory"
                   keystorePass="changeit" keystoreType="pkcs12" 
keystoreFile="D:\cert\spares.p12"
               clientAuth="false" protocol="TLS"/>
    </Connector>
-->
    <!-- Define an SSL Coyote HTTP/1.1 Connector on port 443 -->
    <Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
               port="443" minProcessors="5" maxProcessors="750"
               enableLookups="true"
                 acceptCount="100" debug="0" scheme="https" secure="true">
      <Factory className="org.apache.catalina.net.SSLServerSocketFactory"
                   keystorePass="changeit" keystoreType="pkcs12" 
keystoreFile="D:\cert\spares.p12"
               clientAuth="false" protocol="TLS"/>
    </Connector>

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>