0
votes
0answers
31 views

Disable SSLv3 Apache Tomcat 7 Windows

In view of the recently discovered vulnerability regarding SSLv3 (POODLE attack) I would want to COMPLETELY DISABLE SSLv3 in my Apache server running on Windows. How is this achieved? Thanks in ...
6
votes
1answer
1k views

How do I disable SSLv3 support in Apache Tomcat?

I am trying to reconfigure my Apache Tomcat server to only use TLSv1. However, it is still falling back to SSLv3 using certain browsers. I setup the <connector> tag with the following settings: ...
-1
votes
2answers
57 views

How do I set up TLS-PSK with Tomcat [closed]

The Tomcat people won't help me, so I'm hoping someone here will come through. I can't figure out how to set up Tomcat to use pre-shared keys. All the SSL/TLS guides for it assume certificates. Please ...
0
votes
1answer
84 views

How to install/update/upgrade SSL certificate in Tomcat

I am about to install/update/upgrade a SSL certificate in one of the servers which has the following configuration Sever information: Sever version: Apache Tomcat/6.0.35 OS version: Linux ...
0
votes
0answers
17 views

Client authentication on tomcat fails

I have a Apache Tomcat 7.0.39 server running on a Windows server machine and I'm trying to enable client authentication. I first tried this using eclipse on a client machine I have (also on windows ...
0
votes
1answer
29 views

Where should I apply the SSL certificate?

I just bought a positive SSL for my company's staging server. We Apache web server and tomcat installed on the server. I'm not an expert but I saw some settings in httpd.conf file that has url like ...
3
votes
2answers
225 views

YouTrack on Tomcat 7 using SSL

I have a running YouTrack instance deployed using Tomcat 7 and it works fine on http://example.com:8080/youtrack Apache is already configured to support SSL for the main domain (I have .pem file). ...
4
votes
1answer
338 views

ssl certificate installation on tomcat

I am trying to create a new certificate for my scala play framework on ubuntu but I cannot import my key with keytool. I haven't been able to figure out what is causing it so I thought I'd see here if ...
1
vote
0answers
207 views

SSL Returning Blank Page, No Catalina Errors

This is my second, maybe third, time configuring SSL with Tomcat. Earlier I had created a self signed, which worked, and now using my signed is proving fruitless. I am using Tomcat, operating from ...
0
votes
0answers
71 views

Apache Tomcat & SSL - not connecting from different Sub Network

we are deploying an Apache Tomcat .WAR application provided from a third party. We have followed all the instructions provided from the party. The specs are: windows 2008 server Apache Tomcat 6.0.37 ...
2
votes
1answer
91 views

How to authenticate a user through certificate exchange?

I have an web application A where a user has to authenticate through a username/pass method (https://server.local/webappA). A secure connection is established (HTTPS) with the server A. Then, these ...
0
votes
1answer
43 views

Tomcat6, SSL, Windows - connector issues

I've been asked to move an http tomcat install to https. We've ordered and installed the cert and have followed the directions given by the application developer that are not working - so went and ...
1
vote
2answers
370 views

Error 502 - Random SSL Library Error: 336151568 error:14094410

I'm facing a random 502 error on my webservers. Rate : 0.5% Error in my logs: SSL Library Error: 336151568 error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure OpenSSL Version ...
0
votes
2answers
440 views

Why isn't tomcat serving the correct SSL certificate

I configured tomcat with SSL successfully and was using a self-signed certificate. Recently an issue arose where just having the client "Accept/trust" our certificate wasn't easy. We ended up ...
0
votes
0answers
136 views

SSL Integration with apache used for load balancing

We are using apache mod-proxy on top of tomcat to achive load balancing. It is working fine , now we are planning to move to https from httpd . For that my configuration looks as follows ...
0
votes
0answers
269 views

Squid proxy connect method for SSL connections not working with people who are running nginx

I have a system which looks like this: Tomcat Server (has haproxy installed and balances my proxy servers) >> squid proxy server >> outside. This is the connection flow. My tomcat instance stores ssl ...
0
votes
1answer
55 views

Generate a certificate with Openssl and import the same certificate using keytool

I have a question about the SSL during the use of CAS in LIferay. I have generate the certificate using Openssl (I flollowed this tutorial) on my CAS Server and now I would to import the certificate ...
0
votes
0answers
28 views

Generate a use a Openssl certificate in Tomcat

I need to enable SSL on my Tomcat and Apache so I need to generate the (self-signed) certificate using Openssl tool end, about Tomcat, I need to import the certificate using keytool. I know that is ...
1
vote
1answer
356 views

Getting JMX working under Tomcat 7 with SSL and a self-signed cert

I'm trying to get JMX working under Tomcat 7.0.23 with SSL. The servers are located in AWS, which means all the hosts are NATed, and I need to use JmxRemoteLifecycleListener to explicitly set the two ...
0
votes
1answer
78 views

Can I use openssl to generate key/cert for tomcat?

According to http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Create_a_local_Certificate_Signing_Request_(CSR) I can use keytool to generate the key and cert for tomcat but can I use openssl? ...
0
votes
1answer
327 views

what if I lost the keystore which generate the CSR

Sorry I am a beginner about ssl cert. according to http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Create_a_local_Certificate_Signing_Request_(CSR) it will gen a keystore and CSR. we ...
-1
votes
1answer
74 views

Is it possibel to get that “Padlock” symbol in the address bar for a localhost https connection that uses a self signed certificate? [closed]

I am currently implemented SSL for my Web App in tomcat using a self signed certificate using java Keystore tool. I am using the web app in my machine as localhost. When I visit the url ...
0
votes
0answers
105 views

Tomcat SSL only in path

I want to configure Tomcat so that: It uses SSL only in a specific path; e.g. /admin. The rest of the site shall be accessible via http only (not https). As for now I have done part 1. Is there a ...
0
votes
1answer
740 views

CentOS Apache + Tomcat SSL using mod_jk

I have Apache + Tomcat (using mod_jk) working correctly on a CentOS 6.3 machine. I am trying to set up SSL with Apache. When I browse to the site I get the following output: Forbidden You don't ...
1
vote
1answer
2k views

SSL setup with apache in front of tomcat

i m trying to setup Apache with SSl and proxy SSL requests to my tomcat instance. I think i made the SSL work but theres still a error that shows up: Bad Gateway The proxy server received an ...
0
votes
1answer
564 views

Verify client certificate CN in Tomcat(APR)

I'm running a tomcat installation with the APR libraries installed (with the OpenSSL HTTPS stack that comes with it). What I'm trying to do is to lock a specific HTTPS connector down to users of a ...
0
votes
3answers
3k views

Unable to start Tomcat6 with HTTPS enabled

I have the following server.xml settings for my tomcat6 server <!-- COMMENTED <Connector port="8080" maxThreads="150" enableLookups="false" acceptCount="100" ...
0
votes
1answer
68 views

Wildcard SSL - Apache and Tomcat

We currently run 4 onsite web servers and 1 offsite server. Four of our severs run Apache 2.x webservers, while the one other server runs Tomcat. The server which runs on Tomcat contains third party ...
0
votes
2answers
761 views

how to install ssl on tomcat 7?

I know this question might sound too easy and I should had read all docs available on internet, the true is that I did, and I had no luck, its kinda confusing for me, I have installed many times this ...
0
votes
0answers
242 views

Tomcat configuration for accepting connections from Safari on iPad vs an SSL connector with JSSE ciphers

I have an application deployed on tomcat with a JSSE https connector. When I try to connect to this site with default iPad browser, I always get an error message about the connection cannot be ...
2
votes
3answers
2k views

How to configure my Elastic Load Balancer to balance SSL traffic?

I'm totally lost so I apologize if I'm not making sense. I need to create a load balancer in EC2 for our application servers. I'm trying make the ELB balance traffic over SSL (8443). However, it's ...
0
votes
1answer
136 views

Tomcat subdomain SSL

I am using ProxyPass and ProxyPassReverse directives for redirecting all requests from Tomcat's application (from port 8080) to subdomain (port 80). In addition I have default php website on port 80. ...
1
vote
2answers
346 views

New Key for expired certificate?

I need to create a new certificate for an internal server. It is self signed. Is there an easy way to just extend the expiration date of the current certificate? If not, can I reuse the current ...
2
votes
0answers
382 views

SSL connection alert hanshake failure

I'm having problem establishing the connection between the client and the Server .I'm using my own signed certificate on client and on server. I'm using the SSL ciphers SSLCipherSuite ...
2
votes
1answer
3k views

Keytool import certificate fails “Public keys in reply and keystore don't match”

I'm importing a SSL certificate to use in Tomcat in my keystore using keytool and it fails with "Public keys in reply and keystore don't match" Problem might be declared by the fact that I created a ...
0
votes
2answers
103 views

Can I use apache http server as forwarder to Tomcat?

I have a Tomcat server that listens in 8080(http), 443(https), 7443(https). Note that the connectors for 443 and 7443 use different certificates. I am interested in using httpd for load balancing. Is ...
0
votes
2answers
8k views

The proxy server received an invalid response from an upstream server

I have tomcat server behind the apache. I am using mod_ssl and reverse proxy to the tomcat. All are running at default ports. The full error is as follow. ack Proxy Error The proxy server received ...
0
votes
1answer
32 views

Activating ssl on tomcat

I want to encrypt the http traffic on a tomcat instance via ssl. Therefore I followed the most simplistic approach described on various webpages. But anyway it simply does not work. Here is what I ...
0
votes
1answer
438 views

Tomcat “connection interrupted” with ssl

I can access Tomcat on port 8080, but not on 8443. When I try o get there, this is the error I get in Firefox: The connection was interrupted The connection to the.fqdn.com:8443 was interrupted ...
0
votes
1answer
3k views

Unable to find valid certification path to requested target while CAS authentication

I'm trying to configure CAS authentication. It requires both CAS and client application to use HTTPS protocol. Unfortunately we should use self-signed certificate (with CN that doesn't have anything ...
0
votes
2answers
2k views

How to secure an internal website for internal users, using SSL and Server 2008 as a CA?

I'm needing an experienced person to guide me on this little project :-) We have one Domain Controller [Win2k8 R2] with the Active Directory Certificate Services role. Let's call it ...
1
vote
1answer
469 views

How can I encrypt certain pages with SSL (HTTPS) using IIS7.5, AJP Connector (1.3), and Apache Tomcat 5.5?

I have a Windows Server 2008 R2 Box with IIS 7.5 and Apache Tomcat 5.5. JSP traffic is routed from IIS to Tomcat via the AJP Connector version 1.3. This connector uses an isapi filter in IIS to ...
2
votes
1answer
448 views

how to configure SSL for a Tomcat web application hosted on Azure?

i need to enable SSL on a tomcat web application which is hosted on Azure. i managed to enable SSL on the standalone tomcat web app using this info: tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html ...
0
votes
2answers
1k views

HTTPD proxypass ssl to http

Essentially I am having httpd reroute http requests to a certain location subdomain.domain.com/folder to Tomcat (http://localhost:8080/app/). This works fine using the ProxyPass and ProxyPassReverse ...
1
vote
2answers
520 views

Tomcat/JIRA redirects to HTTP when accessed by HTTPS through a Pound proxy

I'm trying to get a JIRA install to work behind a Pound proxy that is doing SSL termination/"acceleration". Unfortunately it seems that JIRA (Coyote) is redirecting to HTTPS when accessed: ...
0
votes
1answer
193 views

Apache Server connect Tomcat SSL Server

I need to implement the following scenario: 02 different web servers (1 Tomcat and 1 Apache) Tomcat has SSL and was configured to restrict access to clients that do not have the appropriate ...
1
vote
1answer
104 views

ssl problems between two tomcat servers

I have a Tomcat 7 server (kind of like a web server) that I am trying to have talk to a Tomcat 6 server (acting as a document server on another machine) over SSL and I keep getting this error: ...
1
vote
4answers
687 views

Apache + Tomcat: Which one should handle SSL? IP-based proxy forwarding?

We currently have a Tomcat application running with SSL on port 443. Right now we have an apache server that accepts http requests on port 80 and redirects to the Tomcat instance: <VirtualHost ...
0
votes
3answers
2k views

SSL connection to Tomcat (behind Apache - mod_jk)

The SSL connection is working for every page on the Apache server except these served to Tomcat. Tomcat works well on http connection. The setup: Apache/2.2.21 Tomcat-7.0.23 mod_jk to connect them ...
0
votes
1answer
1k views

Apache ajp reverse proxy redirect a specific page to https

I have apache load balancing reverse proxy with mod_proxy_ajp running and redirecting to the backend tomcat servers. I have also created a separate virtual host for HTTPS(SSL) along with HTTP virtual ...