Web access SSL connection.

[roshajai]

I have followed the instruction came with community edition documentation to configure SSL support in web access, but after finishing the configuration, i am not able to connect to port 8443.

while connecting to https://myserver:8443/webmail , i am getting 'page can not be displayed error...while connection to non-ssl port 8080 is working fine.

i tried to telnet on 8443 to see, that if any service is running on that, but the the port failed to connect, while port 8080 is getting connected through telnet.

[ScalixSupport]

Please check $TOMCAT_HOME/logs/catalina.out.

Just so that I am clear on this: do you get connection refused or does the connection hang when you try the telnet.

Connection refused (usually) indicates that nothing is listening on port 8443.

On the SWA server, type

lsof -i :8443

to get a list of processes using that port.

If nothing turns up, it means that tomcat had a problem binding to that port. In the past, we've seen that not supplying the "changeit" password for the Java keystore every time (even though it may say to just hit enter if it's the same as before).

You can reset the keystore by removing ~root/.keystore and running through the keytool steps in the instructions again.

Cheers

Dave

[roshajai]

Thanks for Reply,

Nothing was listening on 8443.

So, I tried by removing the keystore and then recreating it , this time with entering the password in the end.

But this also doesn't seems to be working, CATALINA.OUT log shows the following :

Aug 26, 2005 9:11:24 PM org.apache.catalina.startup.Catalina start
SEVERE: Catalina.start:
LifecycleException: Protocol handler start failed: java.io.IOException: Keystore was tampered with, or password was incorrect
at org.apache.coyote.tomcat5.CoyoteConnector.start(CoyoteConnector.java:1529)
at org.apache.catalina.core.StandardService.start(StandardService.java:489)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:2313)
at org.apache.catalina.startup.Catalina.start(Catalina.java:556)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:287)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:425)
Aug 26, 2005 9:11:24 PM org.apache.catalina.startup.Catalina start
INFO: Server startup in 3999 ms

Although the password i entered same password at both prompts. Does it something with reading the keystore, something related to permissions, not sure but.

Thanks

[ScalixSupport]

Thanks for Reply,

Nothing was listening on 8443.

So, I tried by removing the keystore and then recreating it , this time with entering the password in the end.

But this also doesn't seems to be working, CATALINA.OUT log shows the following :

Aug 26, 2005 9:11:24 PM org.apache.catalina.startup.Catalina start
SEVERE: Catalina.start:
LifecycleException: Protocol handler start failed: java.io.IOException: Keystore was tampered with, or password was incorrect
at org.apache.coyote.tomcat5.CoyoteConnector.start(CoyoteConnector.java:1529)
at org.apache.catalina.core.StandardService.start(StandardService.java:489)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:2313)
at org.apache.catalina.startup.Catalina.start(Catalina.java:556)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:287)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:425)
Aug 26, 2005 9:11:24 PM org.apache.catalina.startup.Catalina start
INFO: Server startup in 3999 ms

Although the password i entered same password at both prompts. Does it something with reading the keystore, something related to permissions, not sure but.

Thanks

Hello,

unless you specify the password in partner.xml, the default password MUST be used, which is "changeit" as described on page 37 of the Installation guide. Is that the password that you used?

To start fresh, remove the keystore in /root/.keystore.

Cheers,

Sascha.

[roshajai]

Thanks,

I tried and it is working now.

Thanks for your help.