Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to encrypt the http traffic on a tomcat instance via ssl. Therefore I followed the most simplistic approach described on various webpages. But anyway it simply does not work. Here is what I did:

  1. "keytool -genkey -alias tomcat -keyalg RSA" and I enterd "changeit" as the password (since this is the defaut chosen by tomcat)
  2. Altering $CATALINA_HOME/conf/servers.xml by uncommenting the following line

    Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="150" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS"/

  3. Restarting tomcat



does not work. However, I can still access the page via normal http like


The logfile does not contain any suspicious information.

What is going wrong here?

share|improve this question

Have you tried including the keyfile in your connector like

keystoreFile="/keystorepath/.keystore" keystorePass="password"

Check this tutorial

share|improve this answer
Thanks. Yeah, I already did that and I also had a look at several tutorials on the net such the one you posted. They are all not correct or a least they are missing something. But what is this something? – toom Nov 3 '12 at 15:52
Okay, I got it. There is nothing wrong with the tutorials. I just simply had an error in my shorewall firewall configuration. – toom Nov 3 '12 at 16:14

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.