{"id":162,"date":"2016-01-19T10:39:39","date_gmt":"2016-01-19T10:39:39","guid":{"rendered":"http:\/\/www.pkipartner.support\/?page_id=162"},"modified":"2016-01-19T10:39:39","modified_gmt":"2016-01-19T10:39:39","slug":"ssl-tomcat-ssl-connector","status":"publish","type":"page","link":"https:\/\/pkipartner.com\/support\/ssl-tomcat-ssl-connector\/","title":{"rendered":"SSL – Tomcat SSL Connector"},"content":{"rendered":"

Tomcat SSL Connector<\/h1>\n

Tomcat will first need a SSL Connector configured before it can accept secure connections.<\/p>\n

Note<\/strong>: By default Tomcat will look for your Keystore with the file name .keystore in the\u00a0CATALINA_Home directory with the default password ‘changeit’.<\/p>\n

Commonly found CATALINA_HOME Directories<\/h3>\n

Unix, Linux or *nix<\/strong> — \/etc\/tomcat5.5
\nWindows<\/strong> — C:\\Program Files\\Apache Software Foundation\\Tomcat 5.5\\<\/p>\n

It is possible to change the file name, password, and even location that Tomcat looks for the\u00a0keystore. If you need to do this, pay special attention to #8 of Option 2 or #5 of Option 1\u00a0below.<\/p>\n

Option 1 — Configure the SSL Connector in server.xml:<\/h3>\n
    \n
  1. Copy your keystore file (your_domain.key or your_domain.pfx) to the home directory\u00a0(see the Note above)<\/li>\n
  2. Open the file Home_Directory\/conf\/server.xml in a text editor<\/li>\n
  3. Un-comment the ‘SSL Connector’ Configuration<\/li>\n
  4. Make sure that the ‘Connector Port’ is 443<\/li>\n
  5. If your keystore filename is something other than the default file name (.keystore)\u00a0and\/or your keystore password is something other than default (‘changeit’) then you\u00a0will need to specify the correct keystore filename and\/or password in your connector\u00a0configuration — ex. keystorePass=”newpassword”. When you are done your\u00a0connector should look something like this:<\/li>\n<\/ol>\n

    To use a JKS (Java Key Store) file:<\/h3>\n

    < Connector port=”443″ maxHttpHeaderSize=”8192″ maxThreads=”150″
    \nminSpareThreads=”25″ maxSpareThreads=”75″ enableLookups=”false”
    \ndisableUploadTimeout=”true” acceptCount=”100″ scheme=”https” secure=”true”
    \nclientAuth=”false” sslProtocol=”TLS”
    \nkeystoreFile=”conf\/user_name\/your_domain.key”
    \nkeystorePass=”your_keystore_password”\/><\/p>\n

    To use a PFX\/P12 (PKCS#12) file:<\/h3>\n

    < Connector port=”443″ maxHttpHeaderSize=”8192″ maxThreads=”150″
    \nminSpareThreads=”25″ maxSpareThreads=”75″ enableLookups=”false”
    \ndisableUploadTimeout=”true” acceptCount=”100″ scheme=”https” secure=”true”
    \nclientAuth=”false” sslProtocol=”TLS” keystoreFile=”conf\/your_domain.pfx”
    \nkeystorePass=”your_keystore_password” keystoreType=”PKCS12″\/><\/p>\n

    6. Save the changes to server.xml
    \nNote<\/strong>: You may need to comment out the following line:
    \n<Listener className=”org.apache.catalina.core.AprLifecycleListener”\u00a0SSLEngine=”on” \/><\/strong>
    \nlike so:
    \n< !–
    \n<Listener className=”org.apache.catalina.core.AprLifecycleListener” SSLEngine=”on”
    \n\/>
    \n–>
    \nNote2<\/strong>: You may also need to set SSLEnabled=”true”<\/strong>on the Connector in order for
    \nthe SSL connection to work or else an HTTP only connection may be made. However,
    \nthis is often not required.
    \n7. Restart Tomcat<\/p>\n

    Please remember all Connector arguments are case sensitive!<\/strong><\/p>\n

    Option 2 — Add an SSL Connector using admintool:<\/h3>\n
      \n
    1. Start Tomcat<\/li>\n
    2. Enter ‘http:\/\/localhost:8080\/admin’ in a local browser to start admintool<\/li>\n
    3. Type a username and password with administrator rights<\/li>\n
    4. On the left select ‘Service’ (Java Web Services Developer Pack)<\/li>\n
    5. Select ‘Create New Connector’ from the drop-down list on the right<\/li>\n
    6. Choose ‘HTTPS’ in the ‘Type’ field<\/li>\n
    7. In the ‘Port’ field, enter ‘443’. This defines the TCP\/IP port number on which Tomcat\u00a0will listen for secure connections<\/li>\n
    8. Enter the Keystore Name and Keystore Password if (a.) your keystore is named\u00a0something other than .keystore, (b.) if .keystore is located in a directory other than\u00a0the home directory of the machine on which Tomcat is running, or if (c.) the\u00a0password is something other than the default value of ‘changeit’. If you have used\u00a0the default values, you can leave these fields blank.<\/li>\n
    9. Select ‘Save’ to save the new Connector<\/li>\n
    10. Select ‘Commit Changes’ to save the new Connector information to the server.xml\u00a0file so that it is available the next time Tomcat is started<\/li>\n<\/ol>\n

      Related Article<\/h3>\n

      Exporting and Restoring a PFX file to IIS<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

      Tomcat SSL Connector Tomcat will first need a SSL Connector configured before it can accept secure connections. Note: By default Tomcat will look for your Keystore with the file name .keystore in the\u00a0CATALINA_Home directory with the default password ‘changeit’. Commonly found CATALINA_HOME Directories Unix, Linux or *nix — \/etc\/tomcat5.5 Windows\u2026<\/p>\n

      Continue reading<\/span><\/i><\/a> <\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages\/162"}],"collection":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/comments?post=162"}],"version-history":[{"count":1,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages\/162\/revisions"}],"predecessor-version":[{"id":163,"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/pages\/162\/revisions\/163"}],"wp:attachment":[{"href":"https:\/\/pkipartner.com\/support\/wp-json\/wp\/v2\/media?parent=162"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}