Re: New to Tomcat -- SSL

2009-12-14 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chuck, On 12/12/2009 1:40 PM, Caldarale, Charles R wrote: >> From: Adria Stembridge [mailto:adrya.stembri...@gmail.com] >> Subject: Re: New to Tomcat -- SSL >> >> I compiled jsvc per tomcat 5.5 documentation. >> &

Re: New to Tomcat -- SSL

2009-12-12 Thread Adria Stembridge
...@unisys.com> wrote: > > From: Adria Stembridge [mailto:adrya.stembri...@gmail.com] > > Subject: Re: New to Tomcat -- SSL > > > > Tomcat works under 8080 and 8443 currently. > > > > Isn't there a way to forward 8443 to 443 with iptables? > > Yes, th

RE: New to Tomcat -- SSL

2009-12-12 Thread Caldarale, Charles R
> From: Adria Stembridge [mailto:adrya.stembri...@gmail.com] > Subject: Re: New to Tomcat -- SSL > > I compiled jsvc per tomcat 5.5 documentation. > > [Linux] service tomcat5 stop > [Linux] ./bin/jsvc -Djava.endorsed.dirs=./common/endorsed -cp > ./bin/bootstrap.jar -out

RE: New to Tomcat -- SSL

2009-12-12 Thread Caldarale, Charles R
> From: Adria Stembridge [mailto:adrya.stembri...@gmail.com] > Subject: Re: New to Tomcat -- SSL > > Tomcat works under 8080 and 8443 currently. > > Isn't there a way to forward 8443 to 443 with iptables? Yes, that's frequently done. From the Tomcat FAQ: - Anoth

Re: New to Tomcat -- SSL

2009-12-12 Thread Adria Stembridge
I've been at this for two days. Learning a lot, but this is production and needs to get back to service. Is there another way, other than revoking/requesting a new SSL certificate and using apache mod_jk? Tomcat works under 8080 and 8443 currently. Isn't there a way to forward 8443 to 443 wit

Re: New to Tomcat -- SSL

2009-12-12 Thread Adria Stembridge
> Linux/UNIX systems do not allow unprivileged userids to access ports < > 1024. Although you can run Tomcat under the root userid, this is not > recommended for security reasons. Instead, start Tomcat with jsvc: > http://tomcat.apache.org/tomcat-6.0-doc/setup.html#Unix%20daemon > > - Chuck > I

RE: New to Tomcat -- SSL

2009-12-12 Thread Caldarale, Charles R
> From: Adria Stembridge [mailto:adrya.stembri...@gmail.com] > Subject: Re: New to Tomcat -- SSL > > SEVERE: Catalina.start: > LifecycleException: service.getName(): "Catalina"; Protocol handler > start > failed: java.net.BindException:

Re: New to Tomcat -- SSL

2009-12-12 Thread Adria Stembridge
> > Don't the Tomcat logs say anything helpful ? Actually, yes... SEVERE: Catalina.start: LifecycleException: service.getName(): "Catalina"; Protocol handler start failed: java.net.BindException: *Permission denied:80* at org.apache.catalina.connector.Connector.start(Connector.java:1097)

Re: New to Tomcat -- SSL

2009-12-11 Thread André Warnier
Adria Stembridge wrote: Well, I appear to have something wrong. Pages are not served over 80 or 443 after updating server.xml and iptables. [linux]# netstat -an | grep LISTEN try netstat -pan, which will also give you the PID of the process owning the listening socket. ... tcp0

Re: New to Tomcat -- SSL

2009-12-11 Thread Adria Stembridge
Well, I appear to have something wrong. Pages are not served over 80 or 443 after updating server.xml and iptables. [linux]# netstat -an | grep LISTEN tcp0 0 0.0.0.0:897 0.0.0.0:* LISTEN tcp0 0 0.0.0.0:111 0.0.0.0:* LISTEN tcp0

Re: New to Tomcat -- SSL

2009-12-11 Thread Adria Stembridge
> Any reason you are using Apache httpd, here, at all? > None - I'd prefer not using it at all if possible. > If Apache httpd is not needed, shut it down and disable it. In fact, > uninstall it if you don't need it. Perfect. > > Ports 80, 8080, 443 and 8443 are allowed through the firewall.

Re: New to Tomcat -- SSL

2009-12-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Adria, On 12/11/2009 2:48 PM, Adria Stembridge wrote: > I've updated the connector as follows: > > port="8080" > redirectPort="8443" > minSpareThreads="25" > connectionTimeout="2" > maxSpareThreads="75

Re: New to Tomcat -- SSL

2009-12-11 Thread Adria Stembridge
I've updated the connector as follows: And restarted Tomcat5. (I am running Tomcat 5.5 btw). Requesting the url https://mydomain.org returns the apache www page, not the tomcat default page. If I access with https://mydomain.org:8443, I get the tomcat page. No pages will

Re: New to Tomcat -- SSL

2009-12-11 Thread Adria Stembridge
Should the port redirects for Connector 8080 and 8009 also be changed to 443? a On Fri, Dec 11, 2009 at 6:59 AM, Pid wrote: > On 11/12/2009 11:47, Adria Stembridge wrote: > >> I'm setting up a standalone instance of Tomcat with SSL. Tomcat5 is >> installed on the RHEL5 box and the sample pages

Re: New to Tomcat -- SSL

2009-12-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Adria, On 12/11/2009 6:47 AM, Adria Stembridge wrote: > I'm setting up a standalone instance of Tomcat with SSL. Tomcat5 is > installed on the RHEL5 box and the sample pages load fine. I created a csr > using keytool and requested a certificate fr

Re: New to Tomcat -- SSL

2009-12-11 Thread Pid
On 11/12/2009 11:47, Adria Stembridge wrote: I'm setting up a standalone instance of Tomcat with SSL. Tomcat5 is installed on the RHEL5 box and the sample pages load fine. I created a csr using keytool and requested a certificate from Verisign. After this is imported (I'm waiting on deliver

Re: New to Tomcat -- SSL

2009-12-11 Thread Mark Thomas
Adria Stembridge wrote: > I'm setting up a standalone instance of Tomcat with SSL. Tomcat5 is > installed on the RHEL5 box and the sample pages load fine. I created a csr > using keytool and requested a certificate from Verisign. After this is > imported (I'm waiting on delivery from verisign