SSL with Tomcat in JBOSS 3.2.3

[acox]

I've read the documemtation and attempted the fixes listed in the forums. No matter what I add to jboss-service.xml (conf and deploy), I always get startup errors regarding loading TLS classes, and SSL errors when connecting to the SSL tomcat instance. So, I am able to get encrypted SSL traffic, but I get errors in my log files.

So, what are the definitive steps to configuring SSL with Tomcat?
If I want to use a minimal install, rather than all, what additional files need to be copied into the minimal directory?

server.log.2004-03-29:2004-03-29 15:17:36,195 DEBUG [org.apache.tomcat.util.net.SSLImplementation] Error loading SSL Implementation org.apache.tomcat.util.net.puretls.PureTLSImplementation

I'd assume the steps should be something like:
1) copy a list of files from all to minimal (or some directory copied from minimal)
2) create keystore
3) edit minimcal/conf/jboss-service.xml
4) edit minimal/deploy/jbossweb-tomcat41.sar/META-INF/jboss-service.xml
5) start jboss and you'll see no errors regarding SSL or TLS in any of your log files

Please point me to an accurate document, if one exists, that actually details how to accomplsh these tasks.

[starksm64]

This is not a valid error, it is really a debug message as indicated by the log4j level. Tomcat is looking for various SSL implementation choices and the 'Error' about PureTLSImplementation simply means it could not be found. It will default to the JDK JSSE implementation and work fine.

[acox]

So if this is truely a warning, and also to avoid the DEBUG errors for every SSL connection:

2004-04-06 12:52:59,697 DEBUG [org.apache.tomcat.util.threads.ThreadPool] Getting new thread data
2004-04-06 12:53:01,840 DEBUG [org.apache.tomcat.util.net.jsse.JSSE14Support] Error getting client certs
javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
...

I added the section below to log4j.xml. This hides the TLS errors on startup and the authentication errors (even though clientAuth="false")

<!-- Limit Util categories to INFO -->
 <category name="org.apache.tomcat.util">
 <priority value="INFO"/>
 </category>

Have I opened myself up to masking other issues, or is this a legitmate "solution"?

[nitin888]

To avoid PureTLSImplementation error
Add SSLImplementation parameter.



Regarding changing log4j into is just pretending that there's no errors. I don't think its the right way. Even i'm trying to get a soln for that problem.

[nitin888]

Add SSLImplementation parameter.

SSLImplementation="org.apache.tomcat.util.net.jsse.JSSEImplementation"

in jboss-service.xml in Factory tag