>>"%JAVA_HOME%\bin\keytool" -genkey -alias tomcat -keyalg RSA
I don't know whats the output of the above command which run and either its
executed successfully or not

You can follow the below example. I am using linux Machine.

root@ubuntu:/home/sanaullah# keytool -genkey -alias tomcat -keyalg RSA

Enter keystore password:
Re-enter new password:
What is your first and last name?
  [Unknown]:  PK
What is the name of your organizational unit?
  [Unknown]:  test
What is the name of your organization?
  [Unknown]:  test
What is the name of your City or Locality?
  [Unknown]:
What is the name of your State or Province?
  [Unknown]:
What is the two-letter country code for this unit?
  [Unknown]:
Is CN=PK, OU=test, O=test, L=Unknown, ST=Unknown, C=Unknown correct?
  [no]:  yes

Enter key password for <tomcat>
        (RETURN if same as keystore password):
root@ubuntu:/home/sanaullah# ls
root@ubuntu:/home/sanaullah# ls /root/.keystore

As i was running the keytool command using root user so the keystore is
created in /root/.keystore. you must find the file somewhere in windows and
set its path in the connector configuration and also set its password

<Connector
           protocol="org.apache.coyote.http11.Http11NioProtocol"
           port="8443" maxThreads="200"
           scheme="https" secure="true" SSLEnabled="true"
           keystoreFile="${user.home}/.keystore" keystorePass="changeit"
           clientAuth="false" sslProtocol="TLS"/>

Regards,
Sanaullah





On Sun, Jul 12, 2015 at 2:42 AM, Joby J. Joseph <jjos...@bankboubyan.com>
wrote:

> Hi,
>
> Thanks for the reply.
> I have followed the same steps provided by the tomcat documentation.
>
> https://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Configuration
>
>
> First I created the keystore file by executing the command ...
>
> "%JAVA_HOME%\bin\keytool" -genkey -alias tomcat -keyalg RSA
>
> Then I added it in the config file.
>
> <Connector
>            protocol="org.apache.coyote.http11.Http11NioProtocol"
>            port="8443" maxThreads="200"
>            scheme="https" secure="true" SSLEnabled="true"
>            keystoreFile="${user.home}/.keystore" keystorePass="changeit"
>            clientAuth="false" sslProtocol="TLS"/>
>
> Here. I got the error as...
>
>
>
> SEVERE: Failed to load keystore type JKS with path
> C:\Windows\system32\config\systemprofile/.keystore due to
> C:\Windows\system32\config\systemprofile\.keystore (The system cannot find
> the file specified)
> java.io.FileNotFoundException:
> C:\Windows\system32\config\systemprofile\.keystore (The system cannot find
> the file specified)
>         at java.io.FileInputStream.open(Native Method)
>         at java.io.FileInputStream.<init>(Unknown Source)
>         at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:400)
>         at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:306)
>         at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeyManagers(JSSESocketFactory.java:565)
>         at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeyManagers(JSSESocketFactory.java:505)
>         at
> org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:490)
>         at
> org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:566)
>         at
> org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:417)
>         at
> org.apache.coyote.http11.AbstractHttp11JsseProtocol.init(AbstractHttp11JsseProtocol.java:119)
>         at
> org.apache.catalina.connector.Connector.initInternal(Connector.java:956)
>         at
> org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)
>         at
> org.apache.catalina.core.StandardService.initInternal(StandardService.java:559)
>         at
> org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)
>         at
> org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:814)
>         at
> org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)
>         at org.apache.catalina.startup.Catalina.load(Catalina.java:624)
>         at org.apache.catalina.startup.Catalina.load(Catalina.java:649)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
>         at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
>         at java.lang.reflect.Method.invoke(Unknown Source)
>         at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:281)
>         at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:449)
>
>
> So, I did a listing of the keystore file and I got the error as Keystore
> file does not exist.
>
>
>
>      Joby J. Joseph
>      Systems Engineer -  Application Support
>
>
>
> -----Original Message-----
> From: Sanaullah [mailto:sanaulla...@gmail.com]
> Sent: 12/07/2015 12:37 PM
> To: Tomcat Users List
> Subject: Re: Setting SSL in Tomcat 7.0
>
> Hi Joby,
>
> Where is your keystore file ?
>
> >>keytool error: java.lang.Exception: Keystore file does not exist:
> .keystore
>
> The Error is self explanatory, "Keystore file does not exist"  could you
> share your server.xml file configuration and also let us know the steps,
> how did you create the keystore ?
>
> Regards,
> Sanaullah
>
> On Sun, Jul 12, 2015 at 2:23 AM, Joby J. Joseph <jjos...@bankboubyan.com>
> wrote:
>
> >  Hi,
> >
> >
> >
> > I need a help for setting up the SSL in Tomcat Server 7.0.
> >
> >
> >
> > I have created keystore and changed the server.xml file. But, I am
> > getting the following exception.
> >
> >
> >
> > Screen for creating the keystore.
> >
> >
> >
> >
> >
> > After this, I did a listing for the keystore values. It shows an error.
> >
> >
> >
> > keytool -list -keystore .keystore
> >
> > and it gives..
> > keytool error: java.lang.Exception: Keystore file does not exist:
> > .keystore
> >
> >
> >
> > Any suggestion this error.
> >
> > Where is the keystore file located.
> >
> >
> >
> >
> >
> > Thanks in advance…
> >
> >
> >
> >
> >
> >
> >
> >      Joby J. Joseph
> >
> >      Systems Engineer -  Application Support
> >
> >
> >
> >
> > **********************************************************************
> > **************** This message contains confidential information and is
> > intended for the use of the addressee only. If you are not the
> > intended recipient of this communication, please delete it
> > immediately, do not copy, distribute or otherwise share this
> > information, and notify the sender promptly.
> >
> > Any views or opinions presented in this e-mail are solely those of the
> > author and do not necessarily represent those of the Bank. The Bank
> > does not endorse or accept responsibility for such views and opinions
> > and accordingly, they are not legally binding on the Bank.
> >
> > WARNING: Although the Bank has taken reasonable precautions to ensure
> > no viruses are present in this e-mail, the Bank cannot accept
> > responsibility for any loss or damage arising from the use of this
> > e-mail or its attachments and shall not be liable for the e-mail
> > content transmitted over the Internet.
> > *********************************************
> >
>
>
> **************************************************************************************
> This message contains confidential information and is intended for the use
> of the addressee only. If you are not the intended recipient of this
> communication, please delete it immediately, do not copy, distribute or
> otherwise share this information, and notify the sender promptly.
>
> Any views or opinions presented in this e-mail are solely those of the
> author and do not necessarily represent those of the Bank. The Bank does
> not endorse or accept responsibility for such views and opinions and
> accordingly, they are not legally binding on the Bank.
>
> WARNING: Although the Bank has taken reasonable precautions to ensure no
> viruses are present in this e-mail, the Bank cannot accept responsibility
> for any loss or damage arising from the use of this e-mail or its
> attachments and shall not be liable for the e-mail content transmitted over
> the Internet.
> *********************************************
>

Reply via email to