-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Khisanth,
On 9/26/16 7:45 AM, TJ wrote: > I have Apache Tomcat/9.0.0.M10 on Windows 10 64bit and want to > setup SSL. Am following > https://tomcat.apache.org/tomcat-9.0-doc/ssl-howto.html and gone > through the steps of creating the keystore with a single self > signed cert using: > > "%JAVA_HOME%\bin\keytool" -genkey -alias tomcat -keyalg RSA > > Thats fine and confirmed the certificate is in there. > > Next I alter the server.xml file as follows and go to restart the > Tomcat service: > > <!-- Define a SSL/TLS HTTP/1.1 Connector on port 8443 This > connector uses the NIO implementation with the JSSE engine. When > using the JSSE engine, the JSSE configuration attributes must be > used. --> > > <Connector port="8443" > protocol="org.apache.coyote.http11.Http11NioProtocol" > maxThreads="150" SSLEnabled="true" > keystoreFile="c:\users\khisanth\.keystore" keystorePass="changeit" > /> <SSLHostConfig> <Certificate > certificateKeystoreFile="conf/localhost-rsa.jks" type="RSA" /> > </SSLHostConfig> </Connector> > > Problem is the service will not restart. If I remove the added > comments it will restart fine. I am logged in as administrator. What do the logs say? %CATALINA_BASE%\logs\catalina.log or, if running as a Windows Service: %CATALINA_BASE%\logs\stdout-*.log While debugging startup errors, it's usually helpful to run Tomcat interactively from the command prompt, like this: C:\> %CATALINA_HOME%\bin\startup.bat Then you get the stdout log right there in the terminal, including any errors with the connector configurations. > The apache server status page does mention HTTPS. Apache httpd or Apache Tomcat? - -chris -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJX6tvtAAoJEBzwKT+lPKRYDHsQAIrw4rcFPwyG7AFEC9gK7z2D uO+l8OmAnj3Kk8Sl+l3JVa4tkMFM9yXRgxCGd4dJEgQUypVP7K31/wg6OjzPpp/r 7iHseL2oJ5rLTfJXbB1y2BQQl/K55Y1M5dANSM3nmmy4+Mz8x8gNbFi+0FiUvgRv JaIRUiEjn2tnUudDLQS0+E0p+IHhYgAuETr4X7p0CKkldMgb/f9w7avGSwDZBw9+ 4a2pkLwXO9alvKT8X/LX92beVCG/OYXwCOVvInOJi6HUvkMLFN9k0RIji+V2rzYS fUJ3AORZ9ODrtrQG/0dZJ/liZgX4uCbKSZBfi5cXbQP78nf8d8B9agjqDeVCFaJi +vN7NEmooWg+AEAtboQwDj58MsoXfaN81Lb95ennBWPv/uqAYJwXlKHTBXadhG1W f9j/dv+GIvBOa6YMh0z2OWzDS9gLD/R4d6ReIxsNnHdC9Iwsj/E1+dwpGSgDOVY/ O54IXRa2AD2hH8iuHRMGJQ5plWSeEBKZLQHLseXW0TdOZnpOiVNwAYB5vkp1QZ9V zheM3Tb8Xqnt58dTx60NB2riMWblTagtwLOITwnoujcbtRXBCl3ARDu2gzUg52uH aElGTDcHoGQAIGVTYeAhVHQm/lshb5WIE594ZHlC1ApQ+a6QWhXEuxM41GXzmQfH 5ZrxwnYwz/eCjLiq+VLX =ZYYx -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org