LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Closed Thread
  Search this Thread
Old 04-14-2019, 01:55 PM   #1
mozer
LQ Newbie
 
Registered: Sep 2013
Posts: 28

Rep: Reputation: Disabled
Issues with self signed cert tomcat 9


Hello all,

I’m having problems with tomcat, this should be an easy task but I'm really confused right now

First I generated the cert,

Code:
keytool -genkey -keystore /opt/tomcat/keys/keystore -alias mozer -keyalg RSA -keysize 4096 -validity 720
Then changed configuration in conf/server.xml to open 8443 port whit this code

Code:
<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
           maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
           clientAuth="false" 
	SSLProtocol="TLS"  
           keyAlias="mozer" keystoreFile="/opt/tomcat/keys/keystore"
           keystorePass="XXXXXXX" />
Restart tomcat but there's no port 8443 listening

Code:
[root@localhost logs]# ss -tua
Netid State      Recv-Q Send-Q                                       Local Address:Port                                                        Peer Address:Port                
udp   UNCONN     0      0                                             192.168.0.50:ntp                                                                    *:*                    
udp   UNCONN     0      0                                             192.168.0.55:ntp                                                                    *:*                    
udp   UNCONN     0      0                                             192.168.0.35:ntp                                                                    *:*                    
udp   UNCONN     0      0                                                127.0.0.1:ntp                                                                    *:*                    
udp   UNCONN     0      0                                                        *:ntp                                                                    *:*                    
udp   UNCONN     0      0                          fe80::a00:27ff:fe73:867e%enp0s3:ntp                                                                   :::*                    
udp   UNCONN     0      0                                                      ::1:ntp                                                                   :::*                    
udp   UNCONN     0      0                                                       :::ntp                                                                   :::*                    
tcp   LISTEN     0      128                                                      *:ssh                                                                    *:*                    
tcp   LISTEN     0      100                                              127.0.0.1:smtp                                                                   *:*                    
tcp   ESTAB      0      0                                             192.168.0.35:ssh                                                         192.168.0.16:55006                
tcp   ESTAB      0      0                                             192.168.0.35:ssh                                                         192.168.0.16:55022                
tcp   ESTAB      0      0                                             192.168.0.35:ssh                                                         192.168.0.16:55048                
tcp   LISTEN     0      100                                                     :::8009                                                                  :::*                    
tcp   LISTEN     0      100                                                     :::webcache                                                              :::*                    
tcp   LISTEN     0      128                                                     :::ssh                                                                   :::*                    
tcp   LISTEN     0      100                                                    ::1:smtp                                                                  :::*                    
tcp   LISTEN     0      1                                         ::ffff:127.0.0.1:mxi                                                                   :::*
And I don’t even get errors in catalina.out or any other log….nothing, I have a a couple of WAR deployed and everything is fine…

I also have a couple of virtual hosts

Code:
<Host name="192.168.0.50"  appBase="hudson" unpackWARs="true" autoDeploy="true">
<Alias> test  </Alias>

<Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
prefix="HU_access_log" suffix=".log"
pattern="%h %l %u %t %r %s %b" />

<Context path="" docBase="/opt/tomcat/webapps/hudson"
debug="0" reloadable="true"/>
</Host>

<Host name="192.168.0.55"  appBase="world" unpackWARs="true" autoDeploy="true">
<Alias> HW  </Alias>

<Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
prefix="HW_access_log" suffix=".log"
pattern="%h %l %u %t %r %s %b" />

<Context path="" docBase="/opt/tomcat/webapps/world"


debug="0" reloadable="true"/>
</Host>
They are working fine, no firewall, no selinux (using centos 7)

Is there something wrong?
 
Old 04-14-2019, 02:33 PM   #2
wpeckham
LQ Guru
 
Registered: Apr 2010
Location: Continental USA
Distribution: Debian, Ubuntu, RedHat, DSL, Puppy, CentOS, Knoppix, Mint-DE, Sparky, VSIDO, tinycore, Q4OS,Manjaro
Posts: 5,627

Rep: Reputation: 2695Reputation: 2695Reputation: 2695Reputation: 2695Reputation: 2695Reputation: 2695Reputation: 2695Reputation: 2695Reputation: 2695Reputation: 2695Reputation: 2695
FYI: It is not recommended or allowed to post the same message in multiple forums on this site. Your message https://www.linuxquestions.org/quest...-a-4175652141/ is a duplicate. I recommend you delete or close this one and progress the issue on that one.
 
1 members found this post helpful.
Old 04-15-2019, 08:25 AM   #3
rtmistler
Moderator
 
Registered: Mar 2011
Location: USA
Distribution: MINT Debian, Angstrom, SUSE, Ubuntu, Debian
Posts: 9,882
Blog Entries: 13

Rep: Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930Reputation: 4930
Please post your thread in only one forum. Posting a single thread in the most relevant forum will make it easier for members to help you and will keep the discussion in one place. This thread is being closed because it is a duplicate.
 
1 members found this post helpful.
  


Closed Thread

Tags
centos, ssl, tomcat



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Issues with self signed cert tomcat 9 mozer Linux - Software 1 04-15-2019 05:54 AM
getting mailx to use other machine's postfix server, not trusting my self-signed cert psycroptic Linux - Software 0 06-21-2013 01:44 AM
how to create signed (not self signed) certificate for Apache ? dlugasx Linux - Server 4 12-16-2011 10:08 AM
[SOLVED] postfix rejecting self-signed cert on remote smtp server? sneakyimp Linux - Server 10 06-27-2011 03:00 PM
How to add SANs to a self signed SSL cert pirhana Linux - Security 1 11-08-2008 08:27 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 05:28 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration