Enabling SSL on RedHat’s JBoss Enterprise Application Platform 5.1
Hi folks,
i’m writing this little note as “errata corrige” of HTTPS Configuration Chapter in RedHat JBoss EAP Installation Guide. If you follow the steps indicated there you will get a not working Tomcat’s istance: That’s because they are missing a step well explained in the Tomcat 6 SSL How To:
Shortly Tomcat can use two SSL Engine:
- the JSSE implementation provided as part of the Java runtime (since 1.4)
- the APR implementation, which uses the OpenSSL engine by default
the RedHat guide shows you how to use java keytool, which can be used with the JSSE implementation, but the default tomcat configuration in JBoss EAP 5.1 uses the APR implementation, that’s means if you would use the keytool and the keystore as i suggest you, you should change this line in <server-profile>/deploy/jbossweb.sar/server.xml
<Listener className=”org.apache.catalina.core.AprLifecycleListener” SSLEngine=”on” />
with this line
<Listener className=”org.apache.coyote.http11.Http11NioProtocol” SSLEngine=”on” />
for non-blocking ssl listener or with
<Listener className=”org.apache.coyote.http11.Http11Protocol” SSLEngine=”on” />
to obtain a blocking ssl listener.
After that you can easily follow the redhat guide.
memset's blog 
We’ve tried your suggestion with blocking and non-blocking options. But we got the following warnings and errors — the deployment was not successful:
2011-07-29 13:55:21,227 WARN [AbstractServerConfig] Unable to calculate ‘WebServicePort’, using default ‘8080’
2011-07-29 13:55:21,229 WARN [AbstractServerConfig] Unable to calculate ‘WebServicePort’, using default ‘8080’
2011-07-29 13:55:21,732 WARN [AbstractServerConfig] Unable to calculate ‘WebServicePort’, using default ‘8080’
2011-07-29 13:55:21,733 WARN [AbstractServerConfig] Unable to calculate ‘WebServicePort’, using default ‘8080’
2011-07-29 13:55:22,077 INFO [WSDLFilePublisher] WSDL published to: file:/shared/appserver/data/SMGASMS/wsdl/ICP.ear/ICPEJB_ha50sd01
.jar/ICPPortMgrPTImplService4709482397563944287.wsdl
2011-07-29 13:55:22,108 INFO [WSDLFilePublisher] WSDL published to: file:/shared/appserver/data/SMGASMS/wsdl/ICP.ear/ICPEJB_ha50sd01
.jar/ICPPortMgr5PTImplService22114231306525035.wsdl
2011-07-29 13:55:23,357 INFO [ProfileServiceBootstrap] Loading profile: ProfileKey@670064a4[domain=default, server=default, name=SMG
ASMS]
2011-07-29 13:55:23,361 ERROR [ProfileServiceBootstrap] Failed to load profile: Summary of incomplete deployments (SEE PREVIOUS ERROR
S FOR DETAILS):
DEPLOYMENTS MISSING DEPENDENCIES:
Deployment “jboss.web.deployment:war=/ICP-ICPEJB_ha50sd01” is missing the following dependencies:
Dependency “jboss.web:service=WebServer” (should be in state “Create”, but is actually in state “** NOT FOUND Depends on ‘jboss.w
eb:service=WebServer’ **”)
Deployment “jboss.web.deployment:war=/ROOT” is missing the following dependencies:
Dependency “jboss.web:service=WebServer” (should be in state “Create”, but is actually in state “** NOT FOUND Depends on ‘jboss.w
eb:service=WebServer’ **”)
Deployment “jboss.web.deployment:war=/SMGASMS” is missing the following dependencies:
Dependency “jboss.web:service=WebServer” (should be in state “Create”, but is actually in state “** NOT FOUND Depends on ‘jboss.w
eb:service=WebServer’ **”)
Deployment “jboss.web.deployment:war=/WebHelp” is missing the following dependencies:
Dependency “jboss.web:service=WebServer” (should be in state “Create”, but is actually in state “** NOT FOUND Depends on ‘jboss.w
eb:service=WebServer’ **”)
Deployment “jboss.web.deployment:war=/admin-console” is missing the following dependencies:
Dependency “jboss.web:service=WebServer” (should be in state “Create”, but is actually in state “** NOT FOUND Depends on ‘jboss.w
eb:service=WebServer’ **”)
Deployment “jboss.web.deployment:war=/invoker” is missing the following dependencies:
…
Your help would be greatly appreciated!