Yes, I do have a CA-issued certificate with a chain to a trusted CA. I've imported it to the keystore. I am close to a solution. When I attempt to open the default Apache web page using "https:" I get an error page that says that the server cannot open the page. It opens with "http:" just fine. I have configured the normal ports i.e. "80" and "443" to redirect to "8443". The reason for this is that the users having to include the port numbers (8080 or 8443) would not be acceptable. They need only enter the DNS name into the browser and DNS does the rest.
I am missing something in the configuration of SERVER.XML, WEB.XML or both to get the server to answer to an https connection. I cannot find what it is that I have not done or I have missed! Any input would be appreciated. Best... Jeffrey D. Fisher Omaha, NE USA -----Original Message----- From: Martin Gainty [mailto:mgai...@hotmail.com] Sent: Monday, March 18, 2013 5:22 PM To: Tomcat Users List Subject: RE: SSL Best Practices Jeff do you have keystore and certificate..if not go to verisign and get a CATrusted pfx... the cost is worth it and anything you create with a self-signed cert will be broken in less than 5 min Feel free to Pingback if you have any questions. Martin > From: jeffrey.jan...@polydyne.com > To: users@tomcat.apache.org > Subject: RE: SSL Best Practices > Date: Mon, 18 Mar 2013 13:34:44 +0000 > > > -----Original Message----- > > From: Jeffrey D. Fisher [mailto:jeff.fisher12...@cox.net] > > Sent: Friday, March 15, 2013 3:03 PM > > To: users@tomcat.apache.org > > Subject: SSL Best Practices > > > > Gentlemen (Ladies): > > > > > > > > I am looking for a published "best practice" on editing the > > SERVER.XML configuration file to use SSL/HTTPS. The key are imported > > into the keystore. > > > > > > > > Any input is appreciated. > > > > > > > > Jeff Fisher > > > > Omaha, NE > > I would start by reading the Tomcat Documentation on the subject. > It's pretty straightforward. > Jeff > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org