Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a web service hosted on Tomcat that is behind IIS 6.0. I use Tomcat Connector to connect Tomcat to IIS.

My web service opens an SSL connection to another server:

  1. Is the SSL connection made from Tomcat, or from IIS, and which SSL keystore (Windows vs. Tomcat) is used?
  2. Is it possible to see the outbound SSL connection in a log file?
share|improve this question
up vote 1 down vote accepted
  1. If you mean in your Java code you're opening an SSL connection, then it's made from tomcat and uses tomcat's keystore.

  2. Only if you log it. I recommend logging every hit to an external dependency in an app.

share|improve this answer
The Java code is verifying credentials through LDAPS. – Eric H Mar 10 '10 at 20:13
Tomcat doesn't seem to have its own keystore, there is no .keystore file on the server, and keytool.exe -list says Keystore files does not exist. – Eric H Mar 10 '10 at 20:46
Interesting, are you sure it is actually making an SSL connection? And how are you doing LDAPS; IIRC tomcat doesn't support that as part of JNDI, if you're using the LDAP Realm module that uses ssl info from the JDK itself... Should be keystore.jks in the Java dirs somewhere. – Ernest Mueller Mar 11 '10 at 21:32

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.