Solved

Jakarta-Tomcat-3.2.3 and SSL

Posted on 2002-05-14
3
259 Views
Last Modified: 2010-03-04
Hi All,  
I have been to the Apache site to read the following page:
http://jakarta.apache.org/tomcat/tomcat-3.2-doc/tomcat-ssl-howto.html

However, this may as well be Greek to me.
I am a newbie when it comes to SSL, HTTPS, and security in general.

I would like to keep things simple for learning. I have Jakarta-Tomcat-3.2.3 installed on my Windows2000 machine. It works just fine when it comes to regular HTTP/HTML/JSP applications.

So, what can I do to make this a secure site with HTTPS pages?

Where can I get the additional security JAR files to put in the CLASSPATH? I can not find them on the Sun site.

What files need to change in my C:\jakarta-tomcat-3.2.3\conf and \bin and \webapps\project directories?

TIA
DoughBoy

0
Comment
Question by:DoughBoy
3 Comments
 
LVL 15

Accepted Solution

by:
samri earned 100 total points
Comment Utility
DoughBoy,

First, I have never tried to use Tomcat (to let you know how good I am :(.  However, I would try , my best to make your life a bit easier (or harder?)

The page that you mentioned have an excellent information.

At this point, I would have to assume that you would not be rebuilding Tomcat, nor does you will use Apache SSL.

Let's go to "Direct SSL" section.

First you would need to get the JDK.  I would believe that we will go for IBM JDK 1.3 since the author successfull use it.  Download it, and get it installed.

http://www7b.boulder.ibm.com/wsdd/wspvtindex.html

Next, you need to generate a certificate for your server.  TO do that, you need an OpenSSL package. Get one from http://www.openssl.org/  I'm not sure how good the win32 port of OpenSSL, but it's worth a try.  Grab it from http://www.kix.or.jp/~fujino/openssl/ (Direct Link: http://www.kix.or.jp/~fujino/openssl/OpenSSL-20010810.tar.gz).  Download it, use winzip to extract it to c:\ssl

Alternately, you can try these link for the OpenSSL.
http://curl.haxx.se/download.html
http://www.zoneedit.com/doc/partner/perl-utils/openssl-win32-binaries/

I have tried, but no luck in creating the new certificate request (on Win2K Pro).



good luck
0
 
LVL 15

Expert Comment

by:periwinkle
Comment Utility
No comment has been added lately, so it's time to clean up this TA.

I will leave a recommendation in the Cleanup topic area with the following recommendation for this question:

answered by samri

Please leave any comments here within the next seven days.

PLEASE DO NOT ACCEPT THIS COMMENT AS AN ANSWER!

periwinkle
EE Cleanup Volunteer
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

As Wikipedia explains 'robots.txt' as -- the robot exclusion standard, also known as the Robots Exclusion Protocol or robots.txt protocol, is a convention to prevent cooperating web spiders and other web robots from accessing all or part of a websit…
Introduction As you’re probably aware the HTTP protocol offers basic / weak authentication, which in combination with the relevant configuration on your web server, provides the ability to password protect all or part of your host.  If you were not…
This video discusses moving either the default database or any database to a new volume.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now