SSL problems

Hi
 
Just a follow up on Remi's pointer.
 
I had the problems when I recently built an e-payments sysyem, all the docs
relate to how to get it to work if you self sign a certificate but not if
you already own a SSL certificate.
 
If that is the case you can simply point your server.xml (this is based on
Tomcat 4.1.2 on Win 2003) to point to the .PKS certificate as this is also
in effect a .keystore file.
 
  <!-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 -->
  <!-- -->  
  <Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
  port="8443"
  minProcessors="5"
  maxProcessors="75"
  enableLookups="true"
  acceptCount="100"
  debug="0"
  scheme="https" 
  secure="true"
  useURIValidationHack="false"
  disableUploadTimeout="true">
  <Factory className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory"
  clientAuth="false"
  keystoreFile="e:\......websrvcert.pfx"
  keystorePass="###"
  keystoreType="###"
  protocol="TLS" />
  </Connector>
 
This may help.
 
In addition, remember a couple of required verisignclass3ca certs expired on
7th Jan this year, if this is the 1st SSL project you have done this year
you may want to get / import the new certs to your original keystore.
 
In the end I cheated and downloaded Tomcat 5 , nicked the keystore files
from there and dropped them into Tomcat 4.1.2, all worked perfectly.
 
Regards,
Neil
 
 

Neil Thompson
Analyst/Programmer 

Information Management Services
Shepway District Council, Civic Centre, Castle Hill Avenue, Folkestone,
Kent. CT20 2QY.
Direct Tel:  01303 852340
E-Mail: [email protected]
<mailto:[email protected]> 
Website: www.shepway.gov.uk <http://www.shepway.gov.uk/>  


       
  _____  

The contents and any attachments of this e-mail message are confidential and
intended only for the named addressees. 
If you have received it in error, please advise the sender immediately by
return email and then delete it from your system.
Any unauthorised distribution, or copying of this transmission, or mis-use
or wrongful disclosure of information contained in it, is strictly
prohibited.
Shepway District Council cannot accept liability for any statements made
which are clearly the sender's own and not expressly made on behalf of the
council." 
  _____  

 

---------------------------------------------------------
Scanning of this message and addition of this footer is performed by
SurfControl SuperScout Email Filter software in conjunction with
virus detection software.
---------------------------------------------------------

-- 
Redhat-ccm-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/redhat-ccm-list
Archives: https://www.redhat.com/pipermail/redhat-ccm-list/