Tomcat Native with Apr not initializing on 8443 with SSL

Discussion:

occup_hazard

2009-11-27 06:37:00 UTC

Hi all,

I am running Ubuntu (Hardy), have tomcat5.5 installed for hardy repo, Apr
1.2.11 ( libapr1-dev), OpenSSL 0.9.8g (libssl-dev), tcnative 1.1.13, jsvc
1.0.2, openjdk-6-jdk and openjdk-6-jre.

Now without SSL set ( not listening on 8443) in server.xml, the tomcat
server starts up fine.

With SSL

Nov 27 00:52:01 emr jsvc.exec[13418]: Nov 27, 2009 12:52:01 AM
org.apache.coyote.http11.Http11AprProtocol init INFO: Initializing Coyote
HTTP/1.1 on http-8080

It just waits there forever no error messages either, I need to have SSL
implemented in tcnative, any ideas...

--
View this message in context: http://old.nabble.com/Tomcat-Native-with-Apr-not-initializing-on-8443-with-SSL-tp26535888p26535888.html
Sent from the Tomcat - User mailing list archive at Nabble.com.

Mladen Turk

2009-11-27 08:32:17 UTC

Permalink

Post by occup_hazard
Hi all,
I am running Ubuntu (Hardy), have tomcat5.5 installed for hardy repo, Apr
1.2.11 ( libapr1-dev), OpenSSL 0.9.8g (libssl-dev), tcnative 1.1.13, jsvc
1.0.2, openjdk-6-jdk and openjdk-6-jre.
Now without SSL set ( not listening on 8443) in server.xml, the tomcat
server starts up fine.
It just waits there forever no error messages either, I need to have SSL
implemented in tcnative, any ideas...

Hard to tell without the actual server.xml conf snippet.
Presuming you've set up all ssl directives correctly,
perhaps the keys need a password?

How about without jsvc?

Regards

--
^TM

occup_hazard

2009-11-27 11:26:30 UTC

Permalink

I actually downloaded the apache-tomcat5.5.tar.gz and tried running the
startup.sh with the same server.xml copied over to it..I works fine..( with
out jsvc ), but i am trying to run it as daemon, so i guess jsvc is the only
option..

Further more with jsvc, If i remove the SSLEngine="on" form with in the 8443
connector tag, all fine and it just starts up listening on both 8080 and
8443 and 8009. I dont think its an issue with the certificate b'cause I used
the same certificate on apache-tomcat5.5.tar.gz....So i guess then it could
be the jsvc or commons..

Please advice

Post by Mladen Turk

Hard to tell without the actual server.xml conf snippet.
Presuming you've set up all ssl directives correctly,
perhaps the keys need a password?
How about without jsvc?
Regards
--
^TM
---------------------------------------------------------------------

--
View this message in context: http://old.nabble.com/Tomcat-Native-with-Apr-not-initializing-on-8443-with-SSL-tp26535888p26541147.html
Sent from the Tomcat - User mailing list archive at Nabble.com.

occup_hazard

2009-11-27 11:15:14 UTC

Permalink

Nov 27 02:28:19 emr jsvc.exec[14439]: Nov 27, 2009 2:28:19 AM
org.apache.coyote.http11.Http11AprProtocol init INFO: Initializing Coyote
HTTP/1.1 on http-8080
Nov 27 03:27:07 emr jsvc.exec[14439]: Nov 27, 2009 3:27:07 AM
org.apache.coyote.http11.Http11AprProtocol init INFO: Initializing Coyote
HTTP/1.1 on http-8443
Nov 27 03:27:07 emr jsvc.exec[14439]: Nov 27, 2009 3:27:07 AM
org.apache.coyote.ajp.AjpAprProtocol init INFO: Initializing Coyote AJP/1.3
on ajp-8009
Nov 27 03:27:07 emr jsvc.exec[14439]: Nov 27, 2009 3:27:07 AM
org.apache.catalina.startup.Catalina load INFO: Initialization processed in
3529869 ms
Nov 27 03:27:08 emr jsvc.exec[14439]: Nov 27, 2009 3:27:08 AM
org.apache.catalina.core.StandardService start INFO: Starting service
Catalina
Nov 27 03:27:08 emr jsvc.exec[14439]: Nov 27, 2009 3:27:08 AM
org.apache.catalina.core.StandardEngine start INFO: Starting Servlet Engine:
Apache Tomcat/5.5.27
Nov 27 03:27:08 emr jsvc.exec[14439]: Nov 27, 2009 3:27:08 AM
org.apache.catalina.core.StandardHost start INFO: XML validation disabled
Nov 27 03:27:12 emr jsvc.exec[14439]: Nov 27, 2009 3:27:12 AM
org.apache.coyote.http11.Http11AprProtocol start INFO: Starting Coyote
HTTP/1.1 on http-8080
Nov 27 03:27:13 emr jsvc.exec[14439]: Nov 27, 2009 3:27:13 AM
org.apache.coyote.http11.Http11AprProtocol start INFO: Starting Coyote
HTTP/1.1 on http-8443
Nov 27 03:27:13 emr jsvc.exec[14439]: Nov 27, 2009 3:27:13 AM
org.apache.coyote.ajp.AjpAprProtocol start INFO: Starting Coyote AJP/1.3 on
ajp-8009
Nov 27 03:27:13 emr jsvc.exec[14439]: Nov 27, 2009 3:27:13 AM
org.apache.catalina.storeconfig.StoreLoader load INFO: Find registry
server-registry.xml at classpath resource
Nov 27 03:27:14 emr jsvc.exec[14439]: Nov 27, 2009 3:27:14 AM
org.apache.catalina.startup.Catalina start INFO: Server startup in 6468 ms

Ok so it started up after a Hour..........What could be the reason, is there
some kinda tuning required...?

Please advice..

Post by occup_hazard
Hi all,
I am running Ubuntu (Hardy), have tomcat5.5 installed for hardy repo, Apr
1.2.11 ( libapr1-dev), OpenSSL 0.9.8g (libssl-dev), tcnative 1.1.13, jsvc
1.0.2, openjdk-6-jdk and openjdk-6-jre.
Now without SSL set ( not listening on 8443) in server.xml, the tomcat
server starts up fine.
With SSL
Nov 27 00:52:01 emr jsvc.exec[13418]: Nov 27, 2009 12:52:01 AM
org.apache.coyote.http11.Http11AprProtocol init INFO: Initializing Coyote
HTTP/1.1 on http-8080
It just waits there forever no error messages either, I need to have SSL
implemented in tcnative, any ideas...

--
View this message in context: http://old.nabble.com/Tomcat-Native-with-Apr-not-initializing-on-8443-with-SSL-tp26535888p26541026.html
Sent from the Tomcat - User mailing list archive at Nabble.com.

Pid

2009-11-27 12:20:31 UTC

Permalink

Post by occup_hazard
Nov 27 02:28:19 emr jsvc.exec[14439]: Nov 27, 2009 2:28:19 AM
org.apache.coyote.http11.Http11AprProtocol init INFO: Initializing Coyote
HTTP/1.1 on http-8080
Nov 27 03:27:07 emr jsvc.exec[14439]: Nov 27, 2009 3:27:07 AM
org.apache.coyote.http11.Http11AprProtocol init INFO: Initializing Coyote
HTTP/1.1 on http-8443
Nov 27 03:27:07 emr jsvc.exec[14439]: Nov 27, 2009 3:27:07 AM
org.apache.coyote.ajp.AjpAprProtocol init INFO: Initializing Coyote AJP/1.3
on ajp-8009
Nov 27 03:27:07 emr jsvc.exec[14439]: Nov 27, 2009 3:27:07 AM
org.apache.catalina.startup.Catalina load INFO: Initialization processed in
3529869 ms
Nov 27 03:27:08 emr jsvc.exec[14439]: Nov 27, 2009 3:27:08 AM
org.apache.catalina.core.StandardService start INFO: Starting service
Catalina
Nov 27 03:27:08 emr jsvc.exec[14439]: Nov 27, 2009 3:27:08 AM
Apache Tomcat/5.5.27
Nov 27 03:27:08 emr jsvc.exec[14439]: Nov 27, 2009 3:27:08 AM
org.apache.catalina.core.StandardHost start INFO: XML validation disabled
Nov 27 03:27:12 emr jsvc.exec[14439]: Nov 27, 2009 3:27:12 AM
org.apache.coyote.http11.Http11AprProtocol start INFO: Starting Coyote
HTTP/1.1 on http-8080
Nov 27 03:27:13 emr jsvc.exec[14439]: Nov 27, 2009 3:27:13 AM
org.apache.coyote.http11.Http11AprProtocol start INFO: Starting Coyote
HTTP/1.1 on http-8443
Nov 27 03:27:13 emr jsvc.exec[14439]: Nov 27, 2009 3:27:13 AM
org.apache.coyote.ajp.AjpAprProtocol start INFO: Starting Coyote AJP/1.3 on
ajp-8009
Nov 27 03:27:13 emr jsvc.exec[14439]: Nov 27, 2009 3:27:13 AM
org.apache.catalina.storeconfig.StoreLoader load INFO: Find registry
server-registry.xml at classpath resource
Nov 27 03:27:14 emr jsvc.exec[14439]: Nov 27, 2009 3:27:14 AM
org.apache.catalina.startup.Catalina start INFO: Server startup in 6468 ms
Ok so it started up after a Hour..........What could be the reason, is there
some kinda tuning required...?
Please advice..

You've got an AJP connector there, do you need that?
If not, comment it out.

I've experienced an HTTPD taking a long time to start up because the
random source initialisation was slow. APR is probably using the same
code libs. Try commenting out

<Listener className="org.apache.catalina.core.AprLifecycleListener"
SSLEngine="on" />

at the beginning of server.xml.

Then see if the startup is quicker.

p

Post by occup_hazard

Post by occup_hazard
Hi all,
I am running Ubuntu (Hardy), have tomcat5.5 installed for hardy repo, Apr
1.2.11 ( libapr1-dev), OpenSSL 0.9.8g (libssl-dev), tcnative 1.1.13, jsvc
1.0.2, openjdk-6-jdk and openjdk-6-jre.
Now without SSL set ( not listening on 8443) in server.xml, the tomcat
server starts up fine.
With SSL
Nov 27 00:52:01 emr jsvc.exec[13418]: Nov 27, 2009 12:52:01 AM
org.apache.coyote.http11.Http11AprProtocol init INFO: Initializing Coyote
HTTP/1.1 on http-8080
It just waits there forever no error messages either, I need to have SSL
implemented in tcnative, any ideas...

Alex Mestiashvili

2009-11-27 12:28:40 UTC

Permalink

Hello , not enough entropy probably , that is why it takes so long .
with tomcat 6.0.18 you need these options
SSLEngine="on" SSLRandomSeed="/dev/urandom"/

<Listener className="org.apache.catalina.core.AprLifecycleListener"
SSLEngine="on" SSLRandomSeed="/dev/urandom"/>

for older versions I had
RANDFILE="/opt/tomcat/.rnd"
export RANDFILE

in the startup.sh script , and rand file was generated by
/usr/bin/openssl rand -out $CATALINA_HOME/.rnd 2048
from init script .

Regards ,
Alex