How to make NT Service for Tomcat(for HTTPS)

you need to change the server.xml file ....

<!--

You _need_ to set up a server certificate if you want this

to work, and you need JSSE.

1. Add JSSE jars to CLASSPATH

2. Edit java.home/jre/lib/security/java.security

Add:

security.provider.2=com.sun.net.ssl.internal.ssl.Provider

3. Do: keytool -genkey -alias tomcat -keyalg RSA

RSA is essential to work with Netscape and IIS.

Use "changeit" as password. ( or add keypass attribute )

You don't need to sign the certificate.

You can set parameter keystore and keypass if you want

to change the default ( user.home/.keystore with changeit )

-->

<Connector className="org.apache.tomcat.service.PoolTcpConnector">

<Parameter name="handler" value="org.apache.tomcat.service.http.HttpConnectionHandler"/>

<Parameter name="port" value="8443"/>

<Parameter name="socketFactory" value="org.apache.tomcat.net.SSLSocketFactory" />

<Parameter name="keypass" value="Passw0rd"/>

<Parameter name="clientAuth" value="false"/>

</Connector>

canmanjoe at 2007-7-1 >

had and solved this problem i was working with jakartas jk_nt service, if you've got tomcat set up properly to use JSSE and you've installed tomcat to run as a service try looking in the jvm.stderr logfile or wherever the output from the jvm is going to, I was getting an IOexception being logged which was extremley uninformative after some fiddling around i finally changed the service logon from the localSystem account to a specified account(i used the account i was currently logged into) on the system which somehow made it all work as it should the only cause i could think of was that changing the account must have made it able to access the keystore file which i'd set up and it wasn't able to load it before some one please correct me here if i'm wrong but i think all you need to do is change the logon for the service to an account which has access to the keystore file that you are using with tomcat.

I've never heard of a seperate set up for tomcat using JSSE/SSH as an NT service.

hope i've helped

Andy

andrewgent1 at 2007-7-1 >