reference: http://tomcat.10.x6.nabble.com/SSL-No-Certificate-file-specified-or-invalid-file-format-td2087714.html
Feb 10, 2014 2:38:32 PM org.apache.catalina.core.AprLifecycleListener init
INFO: Loaded APR based Apache Tomcat Native library 1.1.22.
Feb 10, 2014 2:38:32 PM org.apache.catalina.core.AprLifecycleListener init
Feb 10, 2014 2:38:33 PM org.apache.coyote.http11.Http11AprProtocol init
As mentioned in the docs, there are two SSL implementations that can
be used by Tomcat:
- one provided by Java runtime,
- another provided by OpenSSL library (called through APR/Tomcat-Native).
Their configurations are very different.
The above log fragment shows that you are using the APR one.
To configure it correctly:
I disabled APR by following these steps:
a) remove bin\tcnative-1.dll
b) removeclassName="org.apache.catalina.core.AprLifecycleListener"
SSLEngine="on" /> line from server.xml.
c) remove 'protocol="http11.Http11AprProtocol"' from server.xml's Connector
,
changed as follow:
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="conf/server.keystore" keystorePass="test"
truststoreFile ="conf/client.keystore" truststorePass="test"/>
Feb 10, 2014 2:38:32 PM org.apache.catalina.core.AprLifecycleListener init
INFO: Loaded APR based Apache Tomcat Native library 1.1.22.
Feb 10, 2014 2:38:32 PM org.apache.catalina.core.AprLifecycleListener init
Feb 10, 2014 2:38:33 PM org.apache.coyote.http11.Http11AprProtocol init
As mentioned in the docs, there are two SSL implementations that can
be used by Tomcat:
- one provided by Java runtime,
- another provided by OpenSSL library (called through APR/Tomcat-Native).
Their configurations are very different.
The above log fragment shows that you are using the APR one.
To configure it correctly:
I disabled APR by following these steps:
a) remove bin\tcnative-1.dll
b) remove
SSLEngine="on" /> line from server.xml.
c) remove 'protocol="http11.Http11AprProtocol"' from server.xml's Connector
,
changed as follow:
clientAuth="false" sslProtocol="TLS"
keystoreFile="conf/server.keystore" keystorePass="test"
truststoreFile ="conf/client.keystore" truststorePass="test"/>
No comments:
Post a Comment