Hi, i fixed the problem with SSL-TOMCAT6, yes the first cause is that the permissions on the file don't allow the Tomcat user to load the keystore file [as you see to me ( i'll give youhaz burger) :) ].
but the second & big cause is that keystool generate a "gkr" kind of format while it must be jks format by default. Why: because i use the java installed by the debian package, i've tried to use .bin java installed from the officiel website, so and all works. thank you for your help. > i thank i need some file *.jar to add in > ----/tomcat6/webapps/cas/WEB-INF/lib? > i m wrong ?? Yes, you're wrong. Read Igor's email again. You've put the keystore in the /root directory which should not be accessible to Tomcat. Move it to tomcat/conf and change the path reference to it. Also check that the permissions on the file allow the Tomcat user* to read the file. Once you've done that Tomcat will start, but the certificate probably won't work because you appear to have put the application name 'cas' in the Common Name field - which should contain the hostname. You put the hostname in Organization Name field, where it is not used. p * Because you're not running Tomcat using 'root' right? ** Can I haz burger? > -- > View this message in context: > http://tomcat.10.n6.nabble.com/PLZ-help-i-ve-issue-with-SSL-TOMCAT-tp4889811p4890173.html > Sent from the Tomcat - User mailing list archive at Nabble.com. > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [hidden email] > For additional commands, e-mail: [hidden email] > -- [key:62590808] signature.asc (964 bytes) Download Attachment If you reply to this email, your message will be added to the discussion below: http://tomcat.10.n6.nabble.com/PLZ-help-i-ve-issue-with-SSL-TOMCAT-tp4889811p4891543.html To unsubscribe from PLZ help: i've issue with SSL TOMCAT, click here. NAML -- View this message in context: http://tomcat.10.n6.nabble.com/PLZ-help-i-ve-issue-with-SSL-TOMCAT-tp4889811p4897504.html Sent from the Tomcat - User mailing list archive at Nabble.com.
