Tomcat - Revision history

Leo: Added categories

2020-06-14T23:41:21Z

Added categories

← Older revision		Revision as of 23:41, 14 June 2020
Line 73:		Line 73:
	JkMount /gradsdb/* worker1		JkMount /gradsdb/* worker1
	}}		}}

			{{Navbox Linux}}[[Category:Linux]]
			[[Category:LinuxUtilities]]

Leo: /* mod_jk */

2017-08-21T20:50:28Z

mod_jk

← Older revision		Revision as of 20:50, 21 August 2017
Line 66:		Line 66:
	/gradsdb/*=worker1		/gradsdb/*=worker1

			}}

			When working with mod_ssl, make sure to add a {{code\|JkMount}} to ssl.conf in the virtualhost serving the secured content.

			{{highlight\|lang=text\|code=
			JkMount /gradsdb/* worker1
	}}		}}

Leo: /* mod_jk */

2017-08-21T16:20:56Z

mod_jk

← Older revision		Revision as of 16:20, 21 August 2017
Line 42:		Line 42:
	{{highlight\|lang=terminal\|code=		{{highlight\|lang=terminal\|code=
	# cat /etc/httpd/conf.d/jk.conf		# cat /etc/httpd/conf.d/jk.conf
			LoadModule jk_module modules/mod_jk.so

	<IfModule mod_jk.c>		<IfModule mod_jk.c>
	JkWorkersFile /etc/httpd/conf/workers.properties		JkWorkersFile /etc/httpd/conf/workers.properties

Leo at 16:15, 21 August 2017

2017-08-21T16:15:10Z

← Older revision		Revision as of 16:15, 21 August 2017
Line 21:		Line 21:

	* https://stackoverflow.com/questions/906402/importing-an-existing-x509-certificate-and-private-key-in-java-keystore-to-use-i		* https://stackoverflow.com/questions/906402/importing-an-existing-x509-certificate-and-private-key-in-java-keystore-to-use-i


			== mod_jk ==

			There is no RPM package that provides mod_jk. You will have to compile it yourself.

			Get the tomcat connector from: https://tomcat.apache.org/download-connectors.cgi

			Install dependencies and compile:
			{{highlight\|lang=terminal\|code=
			# yum install -y httpd-devel gcc gcc-c++ make libtool

			## In the source directory:
			/root/source/tomcat-connectors-1.2.42-src/native# ./configure --with-apxs=/usr/bin/apxs
			/root/source/tomcat-connectors-1.2.42-src/native# make
			/root/source/tomcat-connectors-1.2.42-src/native# make install
			}}

			Create the apache configuration:
			{{highlight\|lang=terminal\|code=
			# cat /etc/httpd/conf.d/jk.conf
			<IfModule mod_jk.c>
			JkWorkersFile /etc/httpd/conf/workers.properties
			JkLogFile /var/log/httpd/jk.log
			JkLogLevel info
			JkShmFile /var/log/httpd/jk-runtime-status

			JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories
			# JkAutoAlias /usr/www/tomcat/webapps

			JkMountFile /etc/httpd/conf/jkworkermap.properties
			</IfModule>

			# cat /etc/httpd/conf/workers.properties
			worker.list=worker1
			worker.worker1.type=ajp13
			worker.worker1.host=localhost
			worker.worker1.port=8009


			# cat /etc/httpd/conf/jkworkermap.properties
			/gradsdb/*=worker1

			}}

Leo at 20:30, 16 August 2017

2017-08-16T20:30:59Z

← Older revision		Revision as of 20:30, 16 August 2017
Line 19:		Line 19:

	}}		}}

			* https://stackoverflow.com/questions/906402/importing-an-existing-x509-certificate-and-private-key-in-java-keystore-to-use-i

Leo: Created page with "== Keystore == {{highlight|lang=terminal|code= root@webcat:~# openssl pkcs12 -export -in cpsc.cert -inkey priv.key -out keystore.p12 -name cpscssl -CAfile ca.cert -caname..."

2017-08-16T20:30:36Z

Created page with "== Keystore == {{highlight|lang=terminal|code= root@webcat:~# openssl pkcs12 -export -in cpsc.cert -inkey priv.key -out keystore.p12 -name cpscssl -CAfile ca.cert -caname..."

New page

== Keystore ==

{{highlight|lang=terminal|code=
root@webcat:~# openssl pkcs12 -export -in cpsc.cert -inkey priv.key -out keystore.p12 -name cpscssl -CAfile ca.cert -caname root
Enter Export Password:
Verifying - Enter Export Password:
root@webcat:~# keytool -importkeystore -deststorepass tomcatsucks -destkeypass tomcatsucks -destkeystore ssl.keystore -srckeystore keystore.p12 -srcstoretype PKCS12 -srcstorepass fucktomcat -alias cpscssl
root@webcat:~# keytool -list -keystore ssl.keystore
Enter keystore password:

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 1 entry

cpscssl, Aug 16, 2017, PrivateKeyEntry,
Certificate fingerprint (SHA1): 1E:60:E2:5D:44:E1:FA:B1:F5:10:D9:98:C4:49:2F:F9:90:5F:F4:F9
root@webcat:~# cp ssl.keystore /etc/pki/tls/server.keystore

}}