The SSL configuration for a Tomcat 5.5 server is described at
http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html.  To quote from the
top of that file, this assumes you're not using APR (Apache Portable
Runtime).  APR is not the default configuration as I recall - if you don't
know that you are using APR, you're probably not!

I'll leave someone who knows more about the crypto side to answer your
question about the JKS file.

Can you set this up and test it in two stages?  In the first stage, set up
Tomcat and the webapp and see whether you can get to the app through normal
HTTP.  In the second stage, set up SSL.  The main thing that might prevent
this is if there's a transport guarantee of CONFIDENTIAL in your
application's WEB-INF/web.xml file - if there is, you might want to comment
that out while testing over HTTP, then put it back after you've got SSL
working!  A google for something like "web-inf web.xml transport-guarantee"
will give you more details.

Good luck with the configuration.

- Peter

On 24 March 2010 06:22, joon yoo <jyoo1...@gmail.com> wrote:

> We're in the process of extricating ourselves from a host who developed and
> managed our app through their own hosted server.
>
> In attempting to move the app over to a server under our control:
>
> Tomcat 5.5.28 w/ admin package
> java 1.5.0_28
> Windows 2003 R2
>
> all they gave me was a zipped up directory under their "webapps" dir and
> the
> JKS file for SSL.
>
> Do I need anything other than the JKS file to transfer the SSL cert over to
> our new tomcat server?
>
> Also, in trying to setup the app, I installed tomcat and unzipped it under
> webapps. and subsequently when i try to connect to the app through
> localhost/ourapp it gives up an error:
>
> "Firefox can't establish a connection to the server at localhost:8443"
>
> I know very little about tomcat and java, so please at the very least, any
> answers that can be fully googleable, I would greatly appreciate.
>
> Thanks,
>
> John
>

Reply via email to