我的公司有一個Web應用程序;我們使用NetBeans在Win7上開發,並且該項目在生產和開發中都在tomcat上運行。關於SSL的Tomcat警告和瀏覽器找不到該網站
我正在嘗試確定它將移動到eclipse所需的時間。當我終於把事情運行在Eclipse(或至少看來我),我收到以下消息在Eclipse控制檯頂部,當我告訴Eclipse來運行應用程序:
Dec 07, 2016 4:46:30 PM org.apache.catalina.startup.SetAllPropertiesRule begin
WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'SSLCertificateFile' to 'C:\Users\rcook\eclipse\workspaceEclipse\.metadata\.plugins\org.eclipse.wst.server.core\tmp0\conf\ssl_crt\mycert\server.crt' did not find a matching property.
Dec 07, 2016 4:46:30 PM org.apache.catalina.startup.SetAllPropertiesRule begin
WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'SSLCertificateKeyFile' to 'C:\Users\rcook\eclipse\workspaceEclipse\.metadata\.plugins\org.eclipse.wst.server.core\tmp0\conf\ssl_crt\mycert\server.key' did not find a matching property.
Dec 07, 2016 4:46:30 PM org.apache.catalina.startup.SetAllPropertiesRule begin
WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'SSLCipherSuite' to 'RC4-SHA:HIGH:!ADH:!SSLv2:@STRENGTH' did not find a matching property.
Dec 07, 2016 4:46:30 PM org.apache.catalina.startup.SetAllPropertiesRule begin
WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'SSLPassword' to 'webapps.accesspointinc.com' did not find a matching property.
Dec 07, 2016 4:46:30 PM org.apache.catalina.startup.SetAllPropertiesRule begin
WARNING: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'SSLProtocol' to 'all' did not find a matching property.
Dec 07, 2016 4:46:30 PM org.apache.tomcat.util.digester.SetPropertiesRule begin
WARNING: [SetPropertiesRule]{Server/Service/Engine/Host/Context} Setting property 'source' to 'org.eclipse.jst.jee.server:salespoint-war' did not find a matching property.
Dec 07, 2016 4:46:30 PM org.apache.catalina.core.AprLifecycleListener lifecycleEvent
INFO: The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: C:\Program Files\Java\jdk1.7.0_07\bin;C:\Windows\Sun\Java\bin;C:\Windows\system32;C:\Windows;C:\Program Files\Java\jdk1.7.0_07\jre\bin;C:/Program Files/Java/jre1.8.0_91/bin/server;C:/Program Files/Java/jre1.8.0_91/bin;C:/Program Files/Java/jre1.8.0_91/lib/amd64;C:\ProgramData\Oracle\Java\javapath;c:\local;c:\devTools\apache-maven\bin;C:\Perl64\site\bin;C:\Perl64\bin;c:\Program Files\Java\jdk1.7.0_07\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Microsoft SQL Server\120\DTS\Binn\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\110\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\ManagementStudio\;C:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\120\DTS\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\WinMerge;C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\;c:\Program Files\Apache\apache-cxf-3.1.6\bin;C:\Windows\system32;;.
Dec 07, 2016 4:46:30 PM org.apache.coyote.AbstractProtocol init
在我看來,從http://tomcat.apache.org/tomcat-7.0-doc/config/http.html#SSL_Support開始,我們確實具有正確拼寫的屬性名稱,並且這些相同的設置在我們從NetBeans而不是eclipse運行項目時起作用。
日誌文件繼續,指出仍在執行的各種事物;但是,當服務器初始化完成後,該站點將不會響應瀏覽器。 eclipse中的內置瀏覽器顯示「此頁面無法顯示」,並建議我「打開TLS 1.0,1.1和1.2」;假設他們的意思是在IE中打開它,那已經完成了。從Chrome瀏覽器中顯示「此站點無法提供安全連接」和「本地主機使用不支持的協議」。
誰能告訴我這裏有什麼問題嗎?
你的配置似乎是Tomcat _Native_(又名Http11AprProtocol),它使用OpenSSL - 你有單獨的證書和密鑰文件,以及OpenSSL格式的密碼列表(以及幾年過時的引導) - 但最後一個警告說Tomcat在Eclipse中找不到Native庫 - 如果找不到它,它不會讓我感到意外,因爲支持特定於平臺的代碼與Java的麻煩。除非需要開發/測試/調試TLS細節,否則最好將您的證書和密鑰轉換爲Java格式(JKS或現在的PKCS12);已經有很多問題了。 –