Hi, I have setup small guide on SSL with Tomcat 5.5. You can find it at http://www.mail-archive.com/users%40tomcat.apache.org/msg02500.html
But that guide is in Tomcat 5.5 with APR (Apache Portable Runtime). It works with self-generated certificates. (I think it does not work with Verisign certificates but I am not 100% sure) Try to follow the guide and you will be able to setup SSL. But make sure that you use Tomcat 5.5 because it has APR connector (tcnative-1.dll). Once you setup SSL, test it on https://localhost or https://localhost:port . Then use the following snippet to enable SSL in your web-app. <security-constraint> <web-resource-collection> <web-resource-name>Secure</web-resource-name> <url-pattern>/*</url-pattern> <http-method>GET</http-method> <http-method>POST</http-method> </web-resource-collection> <user-data-constraint> <transport-guarantee>CONFIDENTIAL</transport-guarantee> </user-data-constraint> </security-constraint> For more information, visit: http://registry.paradigma.net/omar/registry/thin/doc/UsingHTTPS.html May be someone help you out with Tomcat 5.0 but since I know things are working with Tomcat 5.5 so I thought above instructions will make you move quickly. Let us know your experience. Regards, D --- Parsons Technical Services <[EMAIL PROTECTED]> wrote: > What is in the logs? > > > > ----- Original Message ----- > From: "Mark Whitby" <[EMAIL PROTECTED]> > To: <users@tomcat.apache.org> > Sent: Wednesday, February 08, 2006 11:02 AM > Subject: Problem with setting up an SSL secure page > > > Dear all, > > I am currently designing a final year project for my University course and I > am having problems getting a working SSL connection. I have Tomcat set up > and working fine, but when it comes to accessing a page over the https > setup, I am having no luck. > > Firstly a few technical details. I am using Windows XP Home, with Internet > Explorer 6.0.2900.2180. I am using the latest Java installation, jdk > 1.5.0_05 and so the JSSE comes installed with that. I'm using Tomcat 5.0, > the latest installation available (it's only been installed on my system for > the last few weeks). I have McAffe Security Centre installed but the > problem occurs even with this turned off. > > Now the problem. I have followed word by word the set up instructions in > the Tomcat manual. I have created the certificate and verified it using the > command line. I have altered the server.xml file to include the path > "keystorePath="D:/FYPCode/keystore" "where I have copied the keystore to. > I've done everything. Yet when I type https://localhost:8443 in the browser > window I get nothing. When using IE it takes ages to search for the page, > then eventually I get "This page cannot be displayed" and in Mozilla I get a > message after a couple of minutes saying the page has timed out and get left > with a blank page. So I can't load the page up at all. > > I've tried everything I can think of to get it to work. I have 3 different > books on this subject and I've followed the instructions in every one to try > and get this to work. Nothing has worked. I did a Google search using as > many different combinations of words I can think of but the only help I get > is for Tomcat 3 and the old JSSE installation. So I'm lost. I did even > think about installing the JSSE 1.3 to see if that had an effect, as I can't > find any of the jar files that are mentionned in that area. However, I felt > it best to ignore that as it says. > > So as you can see I've tried everything I can think of. Nothing as worked. > If anyone can help me I would be extremely grateful. > > Many thanks > > Mark Whitby > [EMAIL PROTECTED] > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
