* Create a self signed keystore named tomcat.keystore in the %CATALINA_HOME%\\conf directory.<\/p>\n
keytool.exe -genkey -alias tomcat -keyalg RSA -storepass changeit -keypass changeit -dname \"cn=localhost\" -keystore tomcat.keystore<\/pre>\n* Config Tomcat conf\/server.xml to use generated keystore:<\/p>\n
\r\n\r\n<\/pre>\n For two way SSL<\/strong>
\n* Import trusted certificate(s) into truststore named tomcat.truststore in the %CATALINA_HOME%\\conf directory.<\/p>\nkeytool.exe -import -v -keystore tomcat.truststore -alias client -storepass changeit -file client.cert<\/pre>\n* Config Tomcat conf\/server.xml to use both keystore and truststore:<\/p>\n
\r\n<\/pre>\n * Restart Tomcat
\n* Test by pointing browser to https:\/\/localhost:8443<\/a><\/p>\nErrors<\/h2><\/span>\n
ssl_error_rx_record_too_long<\/h3><\/span>\n
* When pointing browser to https:\/\/localhost:8443, browser gives error message:<\/p>\n
\r\nSSL received a record that exceeded the maximum permissible length.\r\n(Error code: ssl_error_rx_record_too_long)\r\n<\/pre>\n* Possible cause:
\n– truststoreFile attribute is not setup correctly.
\n– truststoreFile value needs to be full path, partial path does not seem to work.
\n– in Windows environment, path needs to use unix style slashes, i.e. \/ NOT \\.<\/p>\nReference<\/h2><\/span>\n
* Apache Tomcat 5.5 SSL Configuration HOW-TO<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
* Create a self signed keystore named tomcat.keystore in the %CATALINA_HOME%\\conf directory. keytool.exe -genkey -alias tomcat -keyalg RSA -storepass changeit -keypass changeit -dname “cn=localhost” -keystore tomcat.keystore * Config Tomcat conf\/server.xml to use generated keystore: For two way SSL * Import … Continue reading