RE: Need to Specify keystorePass on Command Line - Update

2013-02-12 Thread Harris, Jeffrey E.
> > > > If you had read the Procrun documentation that Mark was kind enough to > point you to above, you might have figured out that you need to modify > your "--JvmOptions=..." syntax. You need to change it to > "++JvmOptions=..." otherwise, you are overwriting all the other options > that that

RE: Need to Specify keystorePass on Command Line - Update

2013-02-12 Thread Jeffrey Janner
> -Original Message- > From: Harris, Jeffrey E. [mailto:jeffrey.har...@mantech.com] > Sent: Tuesday, February 12, 2013 5:35 PM > To: Tomcat Users List > Subject: RE: Need to Specify keystorePass on Command Line - Update > > > > > -Original Message-

RE: Need to Specify keystorePass on Command Line - Update

2013-02-12 Thread Harris, Jeffrey E.
> -Original Message- > From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Sent: Tuesday, February 12, 2013 6:00 PM > To: Tomcat Users List > Subject: Re: Need to Specify keystorePass on Command Line - Update > > -BEGIN PGP SIGNED MESSAGE- &g

Re: Need to Specify keystorePass on Command Line - Update

2013-02-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 2/12/13 4:27 AM, Mark Thomas wrote: > On 12/02/2013 00:53, Harris, Jeffrey E. wrote: >> Current status: >> >> I replaced keystorePass= with >> 'keystorePass="${kspassword}"' in server.xml, and executed the >> command "tomcat7 //TS//Tomca

Re: Need to Specify keystorePass on Command Line

2013-02-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jeffrey, On 2/12/13 9:40 AM, Harris, Jeffrey E. wrote: > Tomcat will host a web-app that will connect as a proxy to another > organization's system to retrieve data that we will use in our > applications. It is the other organization that is mand

Re: Need to Specify keystorePass on Command Line

2013-02-12 Thread André Warnier
Harris, Jeffrey E. wrote: -Original Message- From: André Warnier [mailto:a...@ice-sa.com] Sent: Tuesday, February 12, 2013 3:47 AM To: Tomcat Users List Subject: Re: Need to Specify keystorePass on Command Line Harris, Jeffrey E. wrote: All, I understand that there is no good

RE: Need to Specify keystorePass on Command Line

2013-02-12 Thread Harris, Jeffrey E.
> -Original Message- > From: André Warnier [mailto:a...@ice-sa.com] > Sent: Tuesday, February 12, 2013 3:47 AM > To: Tomcat Users List > Subject: Re: Need to Specify keystorePass on Command Line > > Harris, Jeffrey E. wrote: > > > > All, > > > &g

Re: Need to Specify keystorePass on Command Line - Update

2013-02-12 Thread Mark Thomas
On 12/02/2013 00:53, Harris, Jeffrey E. wrote: > Current status: > > I replaced keystorePass= with > 'keystorePass="${kspassword}"' in server.xml, and executed the > command "tomcat7 //TS//Tomcat7 --JvmOptions=-Dkspassword=" > and have been able to start the SSL listener as a console > application

Re: Need to Specify keystorePass on Command Line

2013-02-12 Thread André Warnier
Harris, Jeffrey E. wrote: All, I understand that there is no good, secure solution. However, my hands are tied on this matter, and I would appreciate if you would focus on providing technical assistance in implementing a solution within the constraints I have been given. Jeffrey, We all

RE: Need to Specify keystorePass on Command Line - Update

2013-02-11 Thread Harris, Jeffrey E.
Current status: I replaced keystorePass= with 'keystorePass="${kspassword}"' in server.xml, and executed the command "tomcat7 //TS//Tomcat7 --JvmOptions=-Dkspassword=" and have been able to start the SSL listener as a console application. However, I have not been able to do the same thing with

RE: Need to Specify keystorePass on Command Line

2013-02-11 Thread Harris, Jeffrey E.
> -Original Message- > From: Christopher Schultz [mailto:ch...@christopherschultz.net] > Sent: Saturday, February 09, 2013 8:29 AM > To: Tomcat Users List > Subject: Re: Need to Specify keystorePass on Command Line > > -BEGIN PGP SIGNED MESSAGE- > Hash: SH

Re: Need to Specify keystorePass on Command Line

2013-02-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jeffrey, On 2/8/13 5:03 PM, Harris, Jeffrey E. wrote: > For our implementation, it does not matter whether another process > can read the startup parameters - as long as the password is not > stored in a file and disappears when the Tomcat's host

RE: Need to Specify keystorePass on Command Line

2013-02-08 Thread Harris, Jeffrey E.
> -Original Message- > From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] > Sent: Friday, February 08, 2013 7:56 PM > To: Tomcat Users List > Subject: RE: Need to Specify keystorePass on Command Line > > > From: Harris, Jeffrey E. [mailto:je

RE: Need to Specify keystorePass on Command Line

2013-02-08 Thread Caldarale, Charles R
> From: Harris, Jeffrey E. [mailto:jeffrey.har...@mantech.com] > Subject: RE: Need to Specify keystorePass on Command Line > > I have a suggestion then : the password should be typed and stored in a > > file mapped into RAM. As long as the system is on, Tomcat can read it, &g

RE: Need to Specify keystorePass on Command Line

2013-02-08 Thread Harris, Jeffrey E.
> -Original Message- > From: André Warnier [mailto:a...@ice-sa.com] > Sent: Friday, February 08, 2013 5:43 PM > To: Tomcat Users List > Subject: Re: Need to Specify keystorePass on Command Line > > Harris, Jeffrey E. wrote: > > > > > > For our imp

Re: Need to Specify keystorePass on Command Line

2013-02-08 Thread André Warnier
Harris, Jeffrey E. wrote: For our implementation, it does not matter whether another process can read the startup parameters - as long as the password is not stored in a file and disappears when the Tomcat's host server is shutdown. I have a suggestion then : the password should be typed and

RE: Need to Specify keystorePass on Command Line

2013-02-08 Thread Harris, Jeffrey E.
> -Original Message- > From: Pid [mailto:p...@pidster.com] > Sent: Friday, February 08, 2013 4:48 PM > To: Tomcat Users List > Subject: Re: Need to Specify keystorePass on Command Line > > On 08/02/2013 16:11, Caldarale, Charles R wrote: > >> From: Harris,

Re: Need to Specify keystorePass on Command Line

2013-02-08 Thread Pid
On 08/02/2013 16:11, Caldarale, Charles R wrote: >> From: Harris, Jeffrey E. [mailto:jeffrey.har...@mantech.com] >> Subject: RE: Need to Specify keystorePass on Command Line > >> First, I cannot store the password ANYWHERE on the system, which is why >> it needs t

RE: Need to Specify keystorePass on Command Line

2013-02-08 Thread Caldarale, Charles R
> From: Harris, Jeffrey E. [mailto:jeffrey.har...@mantech.com] > Subject: RE: Need to Specify keystorePass on Command Line > First, I cannot store the password ANYWHERE on the system, which is why > it needs to be entered on the command line. Then you can't run Tomcat as a s

RE: Need to Specify keystorePass on Command Line

2013-02-08 Thread Harris, Jeffrey E.
> -Original Message- > From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] > Sent: Friday, February 08, 2013 9:24 AM > To: Tomcat Users List > Subject: RE: Need to Specify keystorePass on Command Line > > > From: Harris, Jeffrey E. [mailto:je

RE: Need to Specify keystorePass on Command Line

2013-02-08 Thread Caldarale, Charles R
> From: Harris, Jeffrey E. [mailto:jeffrey.har...@mantech.com] > Subject: Need to Specify keystorePass on Command Line > However, for security reasons, I must specify the keystore password on > the command line. Before making your own life unnecessarily complicated, read

Need to Specify keystorePass on Command Line

2013-02-08 Thread Harris, Jeffrey E.
I am running Tomcat 7.0.35 on Windows Server 2003 SP2, x32. I have SSL configured, and if add the keystorePass parameter to server.xml, SSL starts correctly. However, for security reasons, I must specify the keystore password on the command line. I have searched and the only possible way to I