Hi

I'm having a problem, that seems quite trivial but googling didn't help - so you are my last hope :)

I've set up a Tomcat server with a self signed certificates and that works well. But our providers offers an official certificate from Geotrust for free, so I want to use this.

So I got a 'certificate' and a 'privateKey' as text files. I converted the certificate with OpenSSL to binary format, as described here*

I deleted the self signed certificate with 'keytool -delete...'. And imported the new certificate with:
    keytool -importcert -trustcacerts -alias tomcat -storepass password
            -keystore  .keystore -file "the converted file from above"

keytool -list:
  Keystore-Typ: JKS
  Keystore-Provider: SUN

  Ihr Keystore enthõlt 1 Eintrag/-õge.

  Aliasname: tomcat
  Erstellungsdatum: 20.10.2008
  Eintragstyp: trustedCertEntry
  ...

The Connector in my server.xml looks like this:
    <Connector port="443" SSLEnabled="true"
      protocol="org.apache.coyote.http11.Http11NioProtocol"
      maxThreads="150" scheme="https" secure="true"
      keystoreFile="e:/Projekte/BN3/web/.keystore"
      keystorePass="password" clientAuth="false" sslProtocol="TLS" />

I've attached a catalina.log about the start of Tomcat. The other log files are empty.

The problem is, that when connecting to my Tomcat via https nothing happens. No error, no exception just nothing**. ieHTTPHeaders shows 'HTTP/1.1 302 Moved Temporarily' after the GET. LiveHTTPHeaders in Firefox doesn't even show the GET request.

When I restore the .keystore with the self signed certificate it works again. So what am I missing or doing wrong?


Thanks really in advance for your help & cu boesi

* http://www.geotrust.com/resources/install/jakarta_tomcat.htm

** ok that's not entirely true. Firefox reports:
"Die Verbindung zu sam wurde unterbrochen, während die Seite geladen wurde." - translated to english: "The connection to sam gets broken while loading the page."
21.10.2008 11:18:01 org.apache.catalina.core.AprLifecycleListener init
INFO: Loaded APR based Apache Tomcat Native library 1.1.12.
21.10.2008 11:18:01 org.apache.catalina.core.AprLifecycleListener init
INFO: APR capabilities: IPv6 [true], sendfile [true], accept filters [false], 
random [true].
21.10.2008 11:18:02 org.apache.coyote.http11.Http11AprProtocol init
INFO: Initializing Coyote HTTP/1.1 on http-80
21.10.2008 11:18:02 org.apache.tomcat.util.net.NioSelectorPool getSharedSelector
INFO: Using a shared selector for servlet write/read
21.10.2008 11:18:02 org.apache.coyote.http11.Http11NioProtocol init
INFO: Initializing Coyote HTTP/1.1 on http-443
21.10.2008 11:18:02 org.apache.coyote.ajp.AjpAprProtocol init
INFO: Initializing Coyote AJP/1.3 on ajp-8009
21.10.2008 11:18:02 org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 1320 ms
21.10.2008 11:18:02 org.apache.catalina.core.StandardService start
INFO: Starting service Catalina
21.10.2008 11:18:02 org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/6.0.18
21.10.2008 11:18:02 org.apache.catalina.core.ApplicationContext log
INFO: ContextListener: contextInitialized()
21.10.2008 11:18:02 org.apache.catalina.core.ApplicationContext log
INFO: SessionListener: contextInitialized()
21.10.2008 11:18:03 org.apache.coyote.http11.Http11AprProtocol start
INFO: Starting Coyote HTTP/1.1 on http-80
21.10.2008 11:18:03 org.apache.coyote.http11.Http11NioProtocol start
INFO: Starting Coyote HTTP/1.1 on http-443
21.10.2008 11:18:03 org.apache.coyote.ajp.AjpAprProtocol start
INFO: Starting Coyote AJP/1.3 on ajp-8009
21.10.2008 11:18:03 org.apache.catalina.startup.Catalina start
INFO: Server startup in 916 ms
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to