add

SSLEnabled="true"

to your connector

Filip

On 3/8/2011 12:20 PM, Jacob Nyhart wrote:
I am running Apache version 6.0.18 on a Windows 2003 server. Cannot go to
6.0.29 yet because of vendor/client requirements.



I am attempting to setup SSL, but am not having any success and so I seek
your help.



My connector in my settings.xml file looks like this:



                   <Connector port="443" maxHttpHeaderSize="8192"


maxThreads="150" minSpareThreads="25" maxSpareThreads="75"


enableLookups="false" disableUploadTimeout="true"


acceptCount="100" scheme="https" secure="true"


clientAuth="false" sslProtocol="TLS"


  keystorePass="xxxxxxxx"


  keystoreType="PKCS12"


  keystoreFile="path/to/my/pfx file" />



The pfx file was generated by exporting my certificate from the IIS on the
same server. That cert was generated from our company’s internal CA (lower
level environment).



Now, here’s the problem…  If I call my app like this:  http://domain:8080
-- it works

If I call my app like this:  http://domain:443 – it works, but I don’t
suspect this is SSL traffic since the browser doesn’t present any indication
the traffic is secure.

If I call my app like this: https://domain – it fails – reporting that IE
cannot display the page. (the file being called is a *jsp file).



The server is inside a firewalled DMZ, and I have confirmed with my network

guys that the rule is open. In addition, I have tested this from the server

itself, so firewall rules should not be an issue.



The STDOut.log file and Windows Event Viewers are giving no indications as
to what the problem is, the Tomcat appears to start fine, and APorts shows
that Tomcat6 is listening on port 443.



Any help would be appreciated.



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to