Re: How to configure Tomcat with a Managed Service Account when using LocalMachine certificates for TLS

[Mark Thomas]

On 25/06/2024 14:27, Gavioto 🕵 wrote:
- how are are starting Tomcat?
      Tomcat is starting as a service with "Domain\account1$" (Managed Service 
Account)
- is Tomcat installed as a Windows service?
      Yes

- which account is Tomcat running under?
      "Domain\account1$" (Managed Service Account)

OK. That clarifies things. Thanks.

<snip/>

My actual configuration

Server version name:   Apache Tomcat/9.0.65
Server version number: 9.0.65.0
Server built:          Jul 14 2022 12:28:53 UTC

Getting on for two years old. There are known security vulnerabilities 
in that version. You definitely want to make sure they don't impact your 
environment and you may want to think about upgrading.

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
server="Unknown"
maxThreads="150" scheme="https" secure="true"
   enableLookups="true"
   KeystoreType="Windows-MY-LOCALMACHINE"
clientAuth="false" sslProtocol="TLS"
KeystoreFile=""
KeyAlias="tomcat" />

Attribute names are case-sensitive. You have serveral starting with an 
upper case 'K' when they should all be lower case.

I'd expect you to see some warnings in the logs on startup about 
unrecognised attributes.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org