Author: markt Date: Tue Mar 15 23:00:54 2011 New Revision: 1081980 URL: http://svn.apache.org/viewvc?rev=1081980&view=rev Log: Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=50925 Update docs for keyPass attribute
Modified: tomcat/trunk/webapps/docs/changelog.xml tomcat/trunk/webapps/docs/ssl-howto.xml Modified: tomcat/trunk/webapps/docs/changelog.xml URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/changelog.xml?rev=1081980&r1=1081979&r2=1081980&view=diff ============================================================================== --- tomcat/trunk/webapps/docs/changelog.xml (original) +++ tomcat/trunk/webapps/docs/changelog.xml Tue Mar 15 23:00:54 2011 @@ -106,6 +106,10 @@ Slightly expanded the documentation of the Host element to clarify the relationship between host name and DNS name. (markt) </add> + <fix> + <bug>50925</bug>: Update SSL how-to to take account of + <code>keyPass</code> connector attribute. (markt) + </fix> </changelog> </subsection>" <subsection name="Other"> Modified: tomcat/trunk/webapps/docs/ssl-howto.xml URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/ssl-howto.xml?rev=1081980&r1=1081979&r2=1081980&view=diff ============================================================================== --- tomcat/trunk/webapps/docs/ssl-howto.xml (original) +++ tomcat/trunk/webapps/docs/ssl-howto.xml Tue Mar 15 23:00:54 2011 @@ -265,21 +265,16 @@ sure that the information provided here <p>Finally, you will be prompted for the <em>key password</em>, which is the password specifically for this Certificate (as opposed to any other -Certificates stored in the same keystore file). You <strong>MUST</strong> -use the same password here as was used for the keystore password itself. -This is a restriction of the Tomcat implementation. -(Currently, the <code>keytool</code> prompt will tell you that pressing the -ENTER key does this for you automatically.)</p> +Certificates stored in the same keystore file). The <code>keytool</code> prompt +will tell you that pressing the ENTER key automatically uses the same password +for the key as the keystore. You are free to use the same password or to select +a custom one. If you select a different password to the keystore password, you +will also need to specify the custom password in the <code>server.xml</code> +configuration file.</p> <p>If everything was successful, you now have a keystore file with a Certificate that can be used by your server.</p> -<p><strong>Note:</strong> your private key password and keystore password -should be the same. If they differ, you will get an error along the lines -of <code>java.io.IOException: Cannot recover key</code>, as documented in -<a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=38217";>Bugzilla issue 38217</a>, -which contains further references for this issue.</p> - </subsection> <subsection name="Edit the Tomcat Configuration File"> --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org