Thank you Bill. 

Vadim. 

-----Original Message-----
From: news [mailto:n...@ger.gmane.org] On Behalf Of Bill Barker
Sent: Friday, December 04, 2009 7:25 PM
To: users@tomcat.apache.org
Subject: Re: JSSE question


"Vadim Letitchevski" <vletitchev...@teledyne.com> wrote in message 
news:e17da276f9a0c84fad22739de29c389005dafc3...@entmail01.tad.teledyne.com...
>I am confused. Can Tomcat use only JKS keystore or it can also use pem 
>or some other certificate storages?
>

In the Tomcat docs (http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html),
it shows how to use a PKCS12 keystore.  At some point that should be updated to 
include an example for using a PKCS11 keystore.

The actual answer is that the JSSE Connector can use any keystore format that 
is supported by your Java vendor.  In particular, with the Sun JVM, you can't 
use PEM (however the APR Connector does use PEM).  However, it is usually 
pretty easy to convert PEM to PKCS12 (see the link above for an example).

>
> Thanks
> Vadim.
> (310)765-3812
>
>
> 




---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to