Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a Spring JSF web application which is deployed in JBoss6 Application Server which I want to add SSL(i.e. https). How would I do this in Proper manner with JBoss6?

I've enabled the jboss6\server\default\deploy\jbossweb.sar\server.xml file as follows,

 <Connector protocol="HTTP/1.1" SSLEnabled="true" 
       port="${jboss.web.https.port}" address="${jboss.bind.address}"
       scheme="https" secure="true" clientAuth="false" 
       keystorePass="rmi+ssl" sslProtocol = "TLS" /> 

and I get the following error when the application is deployed.

Caused by: Password verification failed
    at [:1.6.0_22]
    ... 149 more

14:12:21,476 ERROR [AbstractKernelController] Error installing to Start: name=WebServer state=Create: LifecycleException:  Protocol handler initialization failed: Keystore was tampered with, or password was incorrect
    at org.apache.catalina.connector.Connector.initialize( [:6.0.0.Final]
    at org.apache.catalina.core.StandardService.initialize( [:6.0.0.Final]
    at org.apache.catalina.core.StandardServer.initialize( [:6.0.0.Final]
    at org.jboss.web.tomcat.service.deployers.TomcatService.startService( [:6.0.0.Final]
    at org.jboss.system.ServiceMBeanSupport.jbossInternalStart( [:6.0.0.Final (Build SVNTag:JBoss_6.0.0.Final date: 20101228)]
    at org.jboss.system.ServiceMBeanSupport.pojoStart( [:6.0.0.Final (Build SVNTag:JBoss_6.0.0.Final date: 20101228)]
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [:1.6.0_22]
    at sun.reflect.NativeMethodAccessorImpl.invoke( [:1.6.0_22]
share|improve this question

migrated from Oct 3 '12 at 13:16

This question came from our site for professional and enthusiast programmers.

Did you consider setting up an apache with a proxy in front of your jboss? I think it's better to leave access protocol management to a pure web server. – mrembisz Oct 3 '12 at 8:28
my web server is totally based on jboss6 AS. I'm not using Apache – Swarnajith Oct 3 '12 at 8:46
up vote 1 down vote accepted

Make sure you have this in server.xml ,

     <Connector port="443" maxHttpHeaderSize="8192"
     maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
     enableLookups="false" disableUploadTimeout="true"
     acceptCount="100" scheme="https" secure="true"
     clientAuth="false" sslProtocol="TLS">

Use this link for the reference.

share|improve this answer
Please fix the curly quotes to be straight quotes. Curly quotes are invalid XML. – BalusC Oct 3 '12 at 11:25
I defined the port as 8443 and the keystorepassword as well. error invoked because i haven't defined those values. After configuring the values it worked. I only configured the keystoreFile location earlier that's the reason things went wrong. – Swarnajith Oct 16 '12 at 3:50

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.