APR / SSL in 5.5.20 2006-11-27 - By Daniel Blumenthal
Back
I'm in the process of moving to Tomcat 5.5.20, and I've come across a bit of
a snag. All of the conversion went fine until I started testing the SSL
with APR, and it looks like it needs a different configuration. My old
configuration is:
<Connector
className="org.apache.coyote.tomcat5.CoyoteConnector  "
port="443"
minProcessors="5"
maxProcessors="75"
enableLookups="true"
disableUploadTimeout="true"
acceptCount="100"
debug="0"
scheme="https"
secure="true"
clientAuth="false"
sslProtocol="TLS"
keystoreFile="/usr/local/tomcat/conf/ssl/localhost.kdb"
keystorePass="foobar"
truststoreFile="/usr/java/jdk/jre/lib/security/cacerts"
truststorePass="foobar"
/>
But it doesn't connect with this. The documentation says that you should
have something like this:
<Connector
port="443"
maxHttpHeaderSize="8192"
maxThreads="150"
minSpareThreads="25"
maxSpareThreads="75"
enableLookups="false"
disableUploadTimeout="true"
acceptCount="100"
scheme="https"
secure="true"
SSLEngine="on"
SSLCertificateFile="${catalina.base}/conf/localhost.crt"
SSLCertificateKeyFile="${catalina.base}/conf/localhost.key" />
I can export the .crt file from the .kdb file, but how do I get the "key"
file?
Best,
Daniel
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ------
To start a new topic, e-mail: users@(protected)
To unsubscribe, e-mail: users-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
|
|
