-----Original Message-----
From: Mark Thomas [mailto:ma...@apache.org] 
Sent: Wednesday, August 31, 2016 10:52 AM
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: Configuring certificate for ssl support on Tomcat 8.5

On 31/08/2016 15:45, Lazar Kirchev wrote:
> Hello,
> 
> According to Tomcat 8.5 documentation [1] when JSSE is used if the key 
> alias is not specified through the attribute certificateKeyAlias of 
> Certificate entry, then "... the first key read from the keystore will 
> be used...".
> However, when the property is not specified Tomcat tries to use a 
> default key alias (which is "tomcat"). At least I got (on Tomcat 
> 8.5.4)
> java.io.IOException: Alias name tomcat does not identify a key entry
>     at
> org.apache.tomcat.util.net.jsse.JSSEUtil.getKeyManagers(JSSEUtil.java:213)
>     at
> org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(Abstr
> actJsseEndpoint.java:101)
> 
> Is this the intended behavior?

http://svn.us.apache.org/repos/asf/tomcat/tc8.5.x/trunk/webapps/docs/changelog.xml

http://bz.apache.org/bugzilla/show_bug.cgi?id=59867

Mark

------
I got hit by this bug as well when upgrading from 8.0* to 8.5.3.  Adding 
keyAlias="myaliasname" to the connector in server.xml was sufficient to make it 
work.

Steve


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to