[URGENT] Tomcat SSL crash on start-up

[Bruno Morin]

Hi,

I tried to configure Tomcat 4.1.27 with SSL

I use JDK 1.3.1 with jcert.jar, jnet.jar and jsse.jar in
JAVA_HOME/jre/lib/ext/
I had "security.provider.3=com.sun.net.ssl.internal.ssl.Provider" in
JAVA_HOME/jre/lib/ext/java.security


Then I generate a certificate whith those instructions :
keytool -genkey -alias server -keyalg RSA -keystore servercerts.ks
keytool -export -rfc -alias server -keystore servercerts.ks -file
server.cert
keytool -import -file server.cert -keystore client.ks
and put servercerts.ks in CATALINA_HOME


Then I modified the connector in CATALINA_HOME/conf/server.xml like this :







Then I lauched the server but it crash on start-up with the exception :
java.io.IOException: Keystore was tampered with, or password was incorrect

What's wrong ?







-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [URGENT] Tomcat SSL crash on start-up

[Bruno Morin]

Thank you Bill.
Everything is allright now.

- Original Message - 
From: "Bill Barker" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, October 23, 2003 4:32 AM
Subject: Re: [URGENT] Tomcat SSL crash on start-up


> You are missing 'keystoreFile="/path/to/servercerts.ks"' in the Factory
> element.
>
> "Bruno Morin" <[EMAIL PROTECTED]> wrote in message
> news:[EMAIL PROTECTED]
> > Hi,
> >
> > I tried to configure Tomcat 4.1.27 with SSL
> >
> > I use JDK 1.3.1 with jcert.jar, jnet.jar and jsse.jar in
> > JAVA_HOME/jre/lib/ext/
> > I had "security.provider.3=com.sun.net.ssl.internal.ssl.Provider" in
> > JAVA_HOME/jre/lib/ext/java.security
> >
> >
> > Then I generate a certificate whith those instructions :
> > keytool -genkey -alias server -keyalg RSA -keystore servercerts.ks
> > keytool -export -rfc -alias server -keystore servercerts.ks -file
> > server.cert
> > keytool -import -file server.cert -keystore client.ks
> > and put servercerts.ks in CATALINA_HOME
> >
> >
> > Then I modified the connector in CATALINA_HOME/conf/server.xml like this
:
> >  >
> > port="8443" minProcessors="5" maxProcessors="75"
> >
> > enableLookups="true" acceptCount="10" debug="0" scheme="https"
> > secure="true">
> >
> >  >
> > clientAuth="false"
> >
> > protocol="TLS"
> >
> > keystorePass="serverpassword"/>
> >
> > 
> >
> >
> > Then I lauched the server but it crash on start-up with the exception :
> > java.io.IOException: Keystore was tampered with, or password was
incorrect
> >
> > What's wrong ?
>
>
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

HTTPS and java client call

[Bruno Morin]

Hi,

I configured Tomcat to work in HTTPs mode with a self-signed certificate.
and I installed a Soap webService on it.

Is it possible to develop a java client for a webService thru Https, without
create and use a client keystore generated from the server certificate ?


Before the call of the webService I add those instructions :
System.setProperty("java.protocol.handler.pkgs",
"com.sun.net.ssl.internal.www.protocol");

Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());

and when I execute the call, I have the exception
javax.net.ssl.SSLHandshakeException: unknown certificate



Did I forgot an instruction ?

Is it possible to develop a java client for a webService thru Https, without
create and use a client keystore generate from the server certificate ?

How can i do that ?

Thanxs





-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]