0

I have a web service hosted on Tomcat that is behind IIS 6.0. I use Tomcat Connector to connect Tomcat to IIS.

My web service opens an SSL connection to another server:

  1. Is the SSL connection made from Tomcat, or from IIS, and which SSL keystore (Windows vs. Tomcat) is used?
  2. Is it possible to see the outbound SSL connection in a log file?

1 Answer 1

1
  1. If you mean in your Java code you're opening an SSL connection, then it's made from tomcat and uses tomcat's keystore.

  2. Only if you log it. I recommend logging every hit to an external dependency in an app.

3
  • The Java code is verifying credentials through LDAPS.
    – Eric H
    Mar 10, 2010 at 20:13
  • Tomcat doesn't seem to have its own keystore, there is no .keystore file on the server, and keytool.exe -list says Keystore files does not exist.
    – Eric H
    Mar 10, 2010 at 20:46
  • Interesting, are you sure it is actually making an SSL connection? And how are you doing LDAPS; IIRC tomcat doesn't support that as part of JNDI, if you're using the LDAP Realm module that uses ssl info from the JDK itself... Should be keystore.jks in the Java dirs somewhere. Mar 11, 2010 at 21:32

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .