Configure Apache Tomcat - Futurex Documentation

Use the following samples to edit the configuration file for your environment. Find the Tomcat configuration in Tomcat_HOME/conf/server.xml. The following sample shows an example configuration Connector:

Text

<Connector port="8443" scheme="https" secure="true" SSLEnabled="true" maxThreads="150" keyAlias="futurex-tomcat-1784141140:futurex-tomcat" clientAuth="false" keystore="NONE" keystorePass="password" keystoreType="PKCS11" keystoreProvider="SunPKCS11-Futurex">
</Connector>

The following is an example server.xml file:

XML

    <Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
               maxThreads="150" SSLEnabled="true">
        <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
        <SSLHostConfig>
            <Certificate certificateKeystoreFile=""
             certificateKeystoreType="PKCS11"
             certificateKeystoreProvider="SunPKCS11-Futurex"
             certificateKeyAlias="futurex-tomcat-1784141140:futurex-tomcat"
             certificateKeystorePassword="identity_password"
             type="RSA" />
        </SSLHostConfig>
    </Connector>

The keyAlias and certificateKeyAlias values above are examples. Substitute the exact alias printed by keytool -list in the previous section. The CryptoHub assigns the on-token key an alias in the form <alias>-<id>:<alias> (for example, futurex-tomcat-1784141140:futurex-tomcat), where <id> is assigned per key. The short -alias you passed to keytool -genkeypair does not work.

In the certificateKeystorePassword definition, set the identity_password to the CryptoHub identity password configured inside the <CRYPTO-OPR-PASS> tag in the fxpkcs11.cfg file.

⌘I