-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hardibo,
On 8/29/16 6:46 PM, Hardibo Pierre-Jean wrote: > Le 29/08/2016 à 23:38, James H. H. Lampert a écrit : >>> "It doesn't work" is not very informative. What does not work >>> ? What do the Tomcat logfiles say about the problem ? >> >> Does NETSTAT (or WRKTCPSTS, for IBM Midrange Systems, or other >> tools on other systems) tell you the port actually opened? >> >> Do any of the log files tell you that it didn't, and/or give a >> reason why? >> >> One thing did jump out at me: in >>> <Connector port="8443" maxHttpHeaderSize="8192" >>> maxThreads="150" minSpareThreads="25" maxSpareThreads="75" >>> enableLookups="false" disableUploadTimeout="true" >>> acceptCount="100" scheme="https" secure="true" >>> clientAuth="false" sslProtocol="TLS" /> >> I don't see any "keystoreFile" clauses, or the APR equivalent; >> my understanding is that for an HTTPS port to open, Tomcat needs >> to be able to find a keystore of some sort. > > It was memory heap problems i added more memory in > /etc/default/tomcat8 No it wasn't. It was the missing SSLEngine="on" attribute in your <Connector>. Setting scheme="https" does not enable TLS. Setting secure="true" does not enable TLS. Setting sslProtocol="TLS" does not enable TLS. Setting SSLEnabled="true" DOES enable TLS. http://tomcat.apache.org/tomcat-8.0-doc/config/http.html - -chris -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJXxc66AAoJEBzwKT+lPKRYzwcP/3LCslZS0P0YX0or8jzsKUHf ilc15jGkBNmcGRMxiOo7uztC4xLGpyvm++eyC9U5X7Tgm4UQLkGU+weNg3uXrw0R tyFUpcvRgYhUH9lJaRGxcvq1vwChY/ECkhtUPritqZFC+0Uj70uo68cRMFBQwXsF isa5iAtUMgYEOVS3DFZzjcSDghlxXTNLD+Rol7PxZHreBMpm4F45Zgl4yfv4AC0W zGFBizKr7ymOw4A39YUfCkXhAnXrocnUu6YtTOgc86VIwATQPf/TfnKAd+3OoRN5 I4HPNeKqO/lcMGU7RFVySpOEvZtn+qKNVHduCPmxmEKJi9gshw3rjqFhvTlqNccg PqArKta/eekRC5iPDiSecYyf3vTaXd75jktZoT0gD/zcQG6pN291UJUlUtisRXxp K18Pp8BCgYEtS+lWzXGXTrFACVmrCJ5Gm3RSTx5QEOHkqmcEyeioHetJDx9tzOjK qpU2dTqgjKaYquppdJKKc5xACasjJ1Qg9XjMaa7LCDBMlHtUiBCfdTCOpRUQlTAT 3RqptA4THhbHaOWMqUVBv054eQaLefy7Nlcaz4wOakDTiZNTlGyt/EzGbloFOI6d wYgseNDnvU/sS1LRjXiPGb1PsIw3oZcDdVQgUzUrAjxnb0QBJh5fghoKHhZCyCI5 S3i3rqVmYdId3EVH2239 =Ga7A -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
