-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 To whom it may concern,
On 4/27/17 9:53 AM, htsg...@htsweb.com wrote: > Running SNI successfully 8.5.11 since mid January. Installed > 8.5.14. Used same server.xml (snippet below). Wildcard certificate > works under 8.5.11, but errors under 8.5.14. If Connector for port > 443 with wildcard is removed, startup succeeds. I'm guessing the > asterisk can't be stored in the bean. Below is startlog for both > versions. > > server.xml... > > <Connector executor="tomcatThreadPool" address="192.168.52.11" > port="80" protocol="HTTP/1.1" connectionTimeout="20000" > redirectPort="443" /> > > <Connector executor="tomcatThreadPool" address="192.168.52.13" > port="80" protocol="HTTP/1.1" connectionTimeout="20000" > redirectPort="443" /> > > <Connector executor="tomcatThreadPool" address="192.168.52.15" > port="80" protocol="HTTP/1.1" connectionTimeout="20000" > redirectPort="443" /> > > <Connector address="192.168.52.11" port="443" > protocol="org.apache.coyote.http11.Http11NioProtocol" > sslImplementationName="org.apache.tomcat.util.net.jsse.JSSEImplementatio n" > SSLEnabled="true" scheme="https" secure="true" > defaultSSLHostConfigName="*.mydomain.com" maxThreads="150" > compression="false" enableLookups="false" > > > <SSLHostConfig hostName="*.mydomain.com">> [...] [snip] > Caused by: java.lang.IllegalArgumentException: Repository: cannot > add mbean for pattern name > Catalina:type=SSLHostConfig,ThreadPool="https-jsse-nio-192.168.52.11-443 ",name=*.mydomain.com > > ... 23 more That certainly does look like there is a problem. Are you able to use the default name ("_default_") in both cases by simply not specifying the hostName and defaultSSLHostConfigName attributes? - -chris -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJZAiHBAAoJEBzwKT+lPKRYnAgQAMSGIL5Fiyw3TpdoK5yEl4A6 iugdOHs3qa2pRGS26ge/82eidqlSOE+LOl/pB0rISXcde+PUFJtnTRszQmZaSSc/ 8HfXAWfLjoA0fEB0RDD8vWMFUY6jAolk1nzAtMaf8md/29gnS9pJb0UBq8lsG7iU A9ZhmFNnK4Dsf1CYE1RXnhw8FLf8YOqCA4sUq+vz/VeJgonOgXmB1LkPYVXuCuiC 90BwzA3O3kgF01TT//RzkM7LD1m0Tj3UPTQ8t+V51f7ZDzC3XMVDwXpw+75INKsv 3VKBPG+BQKKW+AWFsVDpIPz+Y9VEw3bjHCgEEb0e2H3nOjNJU2YdIbORataVaCMz K9cBDjMZCEfmghnU2fImyFthcWf57MzPutixuX7pvqxiUQAMtqtOGhlz9zsXUwYj o55eym+JLugUHhJdRFmaWhcmsSKW0/Xl4oYNz8LdlO5q1gJN8CLfavg+ngpHD0Hk 7N4QNlzbM+tfCdRhBbC2qWtHjmpH/mtXv+SBHGA45mnkfcAH6t1tMmnqHtS8HcRP 5+eaXx+Vb43Cdnm2JjCeAoKd6D8dHyataBA+DkE4KGvoaJwyiaek87Cy+P5Pmy7q GqbCH6qRxCE9zlYlpz8Ry00YzuUPEKHBLkEmCH4fkpKYcvdaPItW2Z+MAFY3bVMc x1Yujd+ASWkWyOX+KyeX =/2Dx -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org