Hi Franck,
yes, I am using Java 1.5 ONLY
I fitted in the catalina.sh the statement you suggested. In my opinion,
it didn't change anything in the log.
This now looks like this:
---------------------------------------------------------------------------------------------------
13.04.2006 14:00:14 org.apache.catalina.core.AprLifecycleListener
lifecycleEvent
INFO: The Apache Tomcat Native library which allows optimal performance
in production environments was not found on the java.library.path: /opt
/wt24/jdk1.5.0_06/jre/lib/i386/client:/opt/wt24/jdk1.5.0_06/jre/lib/i386:/opt/wt24/jdk1.5.0_06/jre/../lib/i386
13.04.2006 14:00:14 org.apache.coyote.http11.Http11BaseProtocol init
INFO: Initializing Coyote HTTP/1.1 on http-80
13.04.2006 14:00:14 org.apache.coyote.http11.Http11BaseProtocol init
SCHWERWIEGEND: Error initializing endpoint
java.io.IOException: Keystore was tampered with, or password was incorrect
at
sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:768)
at java.security.KeyStore.load(KeyStore.java:1150)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:282)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:222)
at
org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.getKeyManagers(JSSE14SocketFactory.java:141)
at
org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.init(JSSE14SocketFactory.java:109)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocketFactory.java:88)
at
org.apache.tomcat.util.net.PoolTcpEndpoint.initEndpoint(PoolTcpEndpoint.java:292)
at
org.apache.coyote.http11.Http11BaseProtocol.init(Http11BaseProtocol.java:138)
at
org.apache.catalina.connector.Connector.initialize(Connector.java:1016)
at
org.apache.catalina.core.StandardService.initialize(StandardService.java:580)
at
org.apache.catalina.core.StandardServer.initialize(StandardServer.java:791)
at org.apache.catalina.startup.Catalina.load(Catalina.java:503)
at org.apache.catalina.startup.Catalina.load(Catalina.java:523)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:247)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:412)
13.04.2006 14:00:14 org.apache.catalina.startup.Catalina load
SCHWERWIEGEND: Catalina.start
LifecycleException: Protocol handler initialization failed:
java.io.IOException: Keystore was tampered with, or password was incorrect
at
org.apache.catalina.connector.Connector.initialize(Connector.java:1018)
at
org.apache.catalina.core.StandardService.initialize(StandardService.java:580)
at
org.apache.catalina.core.StandardServer.initialize(StandardServer.java:791)
at org.apache.catalina.startup.Catalina.load(Catalina.java:503)
at org.apache.catalina.startup.Catalina.load(Catalina.java:523)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:247)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:412)
13.04.2006 14:00:14 org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 2386 ms
13.04.2006 14:00:15 org.apache.catalina.core.StandardService start
INFO: Starting service Catalina
13.04.2006 14:00:15 org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/5.5.16
13.04.2006 14:00:15 org.apache.catalina.core.StandardHost start
INFO: XML validation disabled
13.04.2006 14:00:18 org.apache.coyote.http11.Http11BaseProtocol start
INFO: Starting Coyote HTTP/1.1 on http-80
13.04.2006 14:00:18 org.apache.coyote.http11.Http11BaseProtocol start
SCHWERWIEGEND: Error starting endpoint
java.io.IOException: Keystore was tampered with, or password was incorrect
at
sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:768)
at java.security.KeyStore.load(KeyStore.java:1150)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:282)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:222)
at
org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.getKeyManagers(JSSE14SocketFactory.java:141)
at
org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.init(JSSE14SocketFactory.java:109)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocketFactory.java:88)
at
org.apache.tomcat.util.net.PoolTcpEndpoint.initEndpoint(PoolTcpEndpoint.java:292)
at
org.apache.tomcat.util.net.PoolTcpEndpoint.startEndpoint(PoolTcpEndpoint.java:312)
at
org.apache.coyote.http11.Http11BaseProtocol.start(Http11BaseProtocol.java:150)
at
org.apache.coyote.http11.Http11Protocol.start(Http11Protocol.java:75)
at
org.apache.catalina.connector.Connector.start(Connector.java:1089)
at
org.apache.catalina.core.StandardService.start(StandardService.java:459)
at
org.apache.catalina.core.StandardServer.start(StandardServer.java:709)
at org.apache.catalina.startup.Catalina.start(Catalina.java:551)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:275)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
13.04.2006 14:00:18 org.apache.catalina.startup.Catalina start
SCHWERWIEGEND: Catalina.start:
LifecycleException: service.getName(): "Catalina"; Protocol handler
start failed: java.io.IOException: Keystore was tampered with, or passwor
d was incorrect
at
org.apache.catalina.connector.Connector.start(Connector.java:1096)
at
org.apache.catalina.core.StandardService.start(StandardService.java:459)
at
org.apache.catalina.core.StandardServer.start(StandardServer.java:709)
at org.apache.catalina.startup.Catalina.start(Catalina.java:551)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:275)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
13.04.2006 14:00:18 org.apache.catalina.startup.Catalina start
INFO: Server startup in 4061 ms
--------------------------------------------------------------------------------------------------------------
Does that tell you more?
thanks
Klaus
Franck Borel schrieb:
Another suggestion:
Be sure that you are using only one Java version and that this version
is > 1.4.1 (there is a known bug with this version if you use it with
JSSE).
Another idea is to use the -Djavax.net.debug=all flag. I never try
this, but it should help you to get more information about what your
JSSE is doing (which keystore and trusstore he try to use):
open the /opt/tomcat/bin/catalina.sh and add the follwing entry for
example after the cygwin entry:
JAVA_OPTS="$JAVA_OPTS" -Djavax.net.debug=all
and restart Tomcat
-- Franck
Franck, I suspect that my way of creating the key could be the problem.
Do you have an idea where I could find a "dummy" key for just
checking, my key is not the problem. It should be a key which is
already working with tomcat.
Thanks
Klaus
Klaus-F. Kaal schrieb:
Yes, Franck, I am "root" when I run key-creation and tomcat...
Franck Borel schrieb:
Next suggestion:
Did you make the key as root? And do you start Tomcat as root?
-- Franck
Yes, in testphase, I do all pw's in low-cases...
Franck Borel schrieb:
Hi Klaus,
Good Morning Franck,
yesterday, you did a great job, trying to help me. I appreciate
that!
Thanks.
But... I am running out of ideas. Regarding the password:
presently, I am using "changeit" for everything (just to get in
running), but I still have no success.
Yesterday, I sent anouther eMail explaining, what I am doing.
Could you please have a look at it and tell me your judgement?
And what I could try additionally?
You would really help a man in trouble.
Thank you very much.
Klaus
This is what I do:
CREATE KEY:
------------------------------------------------------------------------------------------------------
../../java/bin/keytool -genkey -alias tomcat -keyalg RSA
-keystore /opt/wt24/apache-tomcat-5.5.16/conf/.keystore
../../java/bin/keytool -export -alias tomcat -file
/opt/wt24/apache-tomcat-5.5.16/conf/tomcat-server.crt -keystore
/opt/wt24/apache-tomcat-5.5.16/conf/.keystore
../../java/bin/keytool -import -file
/opt/wt24/apache-tomcat-5.5.16/conf/tomcat-server.crt -keystore
/opt/wt24/apache-tomcat-5.5.16/conf/cacerts
In this process, I use the same password for all
------------------------------------------------------------------------------------------------------
SERVER.XML looks like this:
------------------------------------------------------------------------------------------------------
<Connector port="443" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25"
maxSpareThreads="75"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystorePass="secret"
debug="0"
keystoreFile="/opt/wt24/apache-tomcat-5.5.16/conf/.keystore"
truststoreFile="/opt/wt24/apache-tomcat-5.5.16/conf/cacerts"
truststorePass="password as used in key-creation"
/>
-----------------------------------------------------------------------------------------------------
When I START TOMCAT, the log shows:
----------------------------------------------------------------------------------------------------
INFO: Starting Coyote HTTP/1.1 on http-80
12.04.2006 19:43:55 org.apache.coyote.http11.Http11BaseProtocol
start
SCHWERWIEGEND: Error starting endpoint
java.io.IOException: Keystore was tampered with, or password was
incorrect
Ok.
First suggestion: Passwords are case sensitve. Did you consider
this?
-- Franck
------------------------------------------------------------------------
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
------------------------------------------------------------------------
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
------------------------------------------------------------------------
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
--
*Klaus-F. Kaal*
Geschäftsführer
*TIMO/logic/ GmbH*
Singener Str. 42d
D-78256 Steisslingen
phone +49 7738 97096
fax +49 7738 97094
web www.timologic.com <http://www.timologic.com/>
mail [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
------------------------------------------------------------------------
*Das hat es bisher noch nicht gegeben:*
*WebTresor24* <http://www.webtresor24.de>
*
Das Online Backup mit dem innovativen Sorglos - Konzept
Wir sorgen dafür, dass Ihr Backup nie wieder vergessen wird!*
------------------------------------------------------------------------
*
*