On 04/27/2017 12:52 PM, Christopher Schultz wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
To whom it may concern,
On 4/27/17 9:53 AM, htsg...@htsweb.com wrote:
Running SNI successfully 8.5.11 since mid January. Installed
8.5.14. Used same server.xml (snippet below). Wildcard certificate
works under 8.5.11, but errors under 8.5.14. If Connector for port
443 with wildcard is removed, startup succeeds. I'm guessing the
asterisk can't be stored in the bean. Below is startlog for both
versions.
server.xml...
<Connector executor="tomcatThreadPool" address="192.168.52.11"
port="80" protocol="HTTP/1.1" connectionTimeout="20000"
redirectPort="443" />
<Connector executor="tomcatThreadPool" address="192.168.52.13"
port="80" protocol="HTTP/1.1" connectionTimeout="20000"
redirectPort="443" />
<Connector executor="tomcatThreadPool" address="192.168.52.15"
port="80" protocol="HTTP/1.1" connectionTimeout="20000"
redirectPort="443" />
<Connector address="192.168.52.11" port="443"
protocol="org.apache.coyote.http11.Http11NioProtocol"
sslImplementationName="org.apache.tomcat.util.net.jsse.JSSEImplementatio
n"
SSLEnabled="true" scheme="https" secure="true"
defaultSSLHostConfigName="*.mydomain.com" maxThreads="150"
compression="false"
enableLookups="false" >
<SSLHostConfig hostName="*.mydomain.com">> [...]
[snip]
Caused by: java.lang.IllegalArgumentException: Repository: cannot
add mbean for pattern name
Catalina:type=SSLHostConfig,ThreadPool="https-jsse-nio-192.168.52.11-443
",name=*.mydomain.com
... 23 more
That certainly does look like there is a problem.
Are you able to use the default name ("_default_") in both cases by
simply not specifying the hostName and defaultSSLHostConfigName
attributes?
- -chris
I will give it a try and provide feedback here.
Thx,
Dan
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iQIcBAEBCAAGBQJZAiHBAAoJEBzwKT+lPKRYnAgQAMSGIL5Fiyw3TpdoK5yEl4A6
iugdOHs3qa2pRGS26ge/82eidqlSOE+LOl/pB0rISXcde+PUFJtnTRszQmZaSSc/
8HfXAWfLjoA0fEB0RDD8vWMFUY6jAolk1nzAtMaf8md/29gnS9pJb0UBq8lsG7iU
A9ZhmFNnK4Dsf1CYE1RXnhw8FLf8YOqCA4sUq+vz/VeJgonOgXmB1LkPYVXuCuiC
90BwzA3O3kgF01TT//RzkM7LD1m0Tj3UPTQ8t+V51f7ZDzC3XMVDwXpw+75INKsv
3VKBPG+BQKKW+AWFsVDpIPz+Y9VEw3bjHCgEEb0e2H3nOjNJU2YdIbORataVaCMz
K9cBDjMZCEfmghnU2fImyFthcWf57MzPutixuX7pvqxiUQAMtqtOGhlz9zsXUwYj
o55eym+JLugUHhJdRFmaWhcmsSKW0/Xl4oYNz8LdlO5q1gJN8CLfavg+ngpHD0Hk
7N4QNlzbM+tfCdRhBbC2qWtHjmpH/mtXv+SBHGA45mnkfcAH6t1tMmnqHtS8HcRP
5+eaXx+Vb43Cdnm2JjCeAoKd6D8dHyataBA+DkE4KGvoaJwyiaek87Cy+P5Pmy7q
GqbCH6qRxCE9zlYlpz8Ry00YzuUPEKHBLkEmCH4fkpKYcvdaPItW2Z+MAFY3bVMc
x1Yujd+ASWkWyOX+KyeX
=/2Dx
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
