If you use a different location for your ssl certificate or different type, you must set it in tomcat6 configuration also.

On 28/6/13 2:28 AM, Musayev, Ilya wrote:
Thanks Marcus, it was a problem between the keyboard and the chair!

-----Original Message-----
From: Marcus Sorensen [mailto:shadow...@gmail.com]
Sent: Thursday, June 27, 2013 8:00 PM
To: dev@cloudstack.apache.org
Subject: Re: CloudStack SSL on 4.1.0

I'm running SSL, I opened server.xml and added the "Connector" section
pointing to my keystore with the password:

<!-- A "Connector" using the shared thread pool-->
     <Connector executor="tomcatThreadPool" URIEncoding="UTF-8"
                port="8080" 
protocol="org.apache.coyote.http11.Http11NioProtocol"
                connectionTimeout="120000" disableUploadTimeout="true"
                acceptCount="300" enableLookups="false" maxThreads="400"
                maxHttpHeaderSize="8192" redirectPort="8443" />


     <!-- Define a SSL HTTP/1.1 Connector on port 8443
          This connector uses the JSSE configuration, when using APR, the
          connector should be using the OpenSSL style configuration
          described in the APR documentation -->
     <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
                maxThreads="400" scheme="https" secure="true"
                clientAuth="false" sslProtocol="TLS"
                keystoreType="PKCS12"
                keystoreFile="/etc/cloudstack/management/keystore.pk12"
                keystorePass="mykeystorepass"
                />

On Thu, Jun 27, 2013 at 5:45 PM, Musayev, Ilya <imusa...@webmd.net>
wrote:
I will file this as a bug If I get no response :(

-----Original Message-----
From: Musayev, Ilya [mailto:imusa...@webmd.net]
Sent: Thursday, June 27, 2013 6:58 PM
To: dev@cloudstack.apache.org
Subject: CloudStack SSL on 4.1.0

Has anyone been able to get CloudStack 4.1.0 to work with SSL on 8443?

I cannot, no matter what I tried. I was able to get 4.0 to work, but
4.1.0 would not. Nothing useful at logs :(

Thanks
ilya


Reply via email to