Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a web service hosted on Tomcat that is behind IIS 6.0. I use Tomcat Connector to connect Tomcat to IIS.

My web service opens an SSL connection to another server:

  1. Is the SSL connection made from Tomcat, or from IIS, and which SSL keystore (Windows vs. Tomcat) is used?
  2. Is it possible to see the outbound SSL connection in a log file?
share|improve this question
add comment

1 Answer 1

up vote 1 down vote accepted
  1. If you mean in your Java code you're opening an SSL connection, then it's made from tomcat and uses tomcat's keystore.

  2. Only if you log it. I recommend logging every hit to an external dependency in an app.

share|improve this answer
    
The Java code is verifying credentials through LDAPS. –  Eric H Mar 10 '10 at 20:13
    
Tomcat doesn't seem to have its own keystore, there is no .keystore file on the server, and keytool.exe -list says Keystore files does not exist. –  Eric H Mar 10 '10 at 20:46
    
Interesting, are you sure it is actually making an SSL connection? And how are you doing LDAPS; IIRC tomcat doesn't support that as part of JNDI, if you're using the LDAP Realm module that uses ssl info from the JDK itself... Should be keystore.jks in the Java dirs somewhere. –  Ernest Mueller Mar 11 '10 at 21:32
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.