Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've installed tomcat and it is running perfectly fine.

However, I can't access it via https layer.

Port 8080 works fine:

curl -IL http://localhost:8080
HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Content-Type: text/html;charset=ISO-8859-1
Transfer-Encoding: chunked
Date: Sat, 27 Apr 2013 16:20:23 GMT

Port 8443 doesn't respond:

curl -IL https://localhost:8443
curl: (7) couldn't connect to host

This line is uncommented in my server.xml

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true" 
 maxThreads="150" scheme="https" secure="true" clientAuth="false" 
 keystorePass="somepwd" />

I've even changed the protocol to "org.apache.coyote.http11.Http11Protocol" but that hasn't helped either.

I have restarted the tomcat service after every change but yet:

curl https://localhost:8443
curl: (7) couldn't connect to host

My tomcat version is 7.0.39

I've generated my .keystore file with this command keytool -genkey -alias tomcat -keyalg RSA

share|improve this question

Changed you settings like below and it should work

  <!-- SSL Port 8443 --> 
  <Connector port="8443" 
  maxThreads="150" scheme="https" secure="true" 
  clientAuth="false" sslProtocol="TLS"/> 
share|improve this answer
how are you generating the .crt and .pem files. I only have a .keystore file – Omnipresent Apr 27 '13 at 13:45

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.