Tuesday, February 10, 2009

SSL cert APR tomcat

Certificate setup


Generating the certificate:

http://www.akadia.com/services/ssh_test_certificate.html

Example port 8443 config for tomcat from SSAP:

From server.xml:


maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false"
SSLEngine="on"
SSLCertificateFile="/etc/pki/tls/certs/dev-advertise.myspace.com.crt"
SSLCertificateKeyFile="/etc/pki/tls/private/dev-advertise.myspace.com.key"
SSLProtocol="all -SSLv2"
SSLCipherSuite="ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW" />

No comments: