Stuck trying to cofigure SSL

[Qian, Yi]

There are few things you can try

1. When a user started tomcat, it looks for the .keystore file in the
users home directory, make sure you are the owner of tomcat process. Sorry
I do not know how to check this in Windows environment.

2. You can specify the keystone file in Connector 8443 by
keystoreFile="your file" and keystorePass="password" in tomcat server.xml
file

3. Please look at logs in ${catalina.home}/logs, it will tell you exact
where the problem is, at least google the error message generally will
give you pretty good answer on how to fix it

On 1/31/14 4:14 PM, "Craig_Caughlin" <craigcaughlin at gmail.com> wrote:

>According to the Tomcat documentation (
>http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html ), I've done:
>
>1.) "C:\Program Files (x86)\Java\jdk1.7.0_51\bin\keytool" -genkey -alias
>tomcat -keyalg RSA and used the default changeit password
>
>I see I DO have a .keystore file in my home directory. I did NOT run the
>command to change the name or location, because I think that's optional?
>
>2.) The instruction say "Edit the Tomcat Configuration File" but I don't
>know what file this is - is it the server.xml file or web.xml file?
>
>3.) I've uncommented the following from the server.xml file, and then
>saved
>the file:
>
>    <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
>               maxThreads="150" scheme="https" secure="true"
>               clientAuth="false" sslProtocol="TLS" />
>
>4.) I restarted Tomcat and when I try and go to: https://localhost:8443/ I
>still get a "This page can't be displayed" error.
>
>5.) Even though I did not specify a different location for the .keystore
>file, I don't see it referenced in my server.xml file, and it SHOULD be
>listed there, shouldn't it?
>
>What am I overlooking?
>
>
>
>
>
>--
>View this message in context:
>http://shibboleth.1660669.n2.nabble.com/Stuck-trying-to-cofigure-SSL-tp759
>4524.html
>Sent from the Shibboleth - Users mailing list archive at Nabble.com.
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net
>