Secure Software Development - Configure the Apache tomcat ,SSL handshake messages in Ubuntu

In this “Secure Software Development – Configure the Apache tomcat ,SSL handshake messages in Ubuntu” article follow below topics.

Configure the Apache tomcat Web server (version 7.0) to support HTTPS.
Log the SSL handshake messages to a log file. Can you identify the SSL/TLS handshake steps on the log?

01. Configure the Apache tomcat Web server (version 7.0) to support HTTPS. | Secure Software

1.1 Install openjdk in Ubuntu OS

1.2 Generate a keystore and self-signed certificate

1.3 sudo chmod +x catalina.sh command

1.4 Run the Apache server using “sudo ./catalina.sh run”

1.5 Localhost:8080

1.6 Change the server.xml file

3.	<!-- Define an SSL Coyote HTTP/1.1 Connector on port 8443 -->
4.	<Connector
5.	           protocol="org.apache.coyote.http11.Http11NioProtocol"
6.	           port="8443" maxThreads="200"
7.	           scheme="https" secure="true" SSLEnabled="true"
8.	           keystoreFile="${user.home}/.keystore" keystorePass="changeit"
9.	           clientAuth="false" sslProtocol="TLS"/>

1.7 Add path to the Keystore file path and change the password as that I gave.

1.8 Path and the password as 123456

1.9 Then start the server again using sudo ./catalina.sh run

02. Log the SSL handshake messages to a log file. Can you identify the SSL/TLS handshake steps on the log?

2.1 Djavax.net.debug=ssl.handshake

2.2 Run the server using “sudo ./catalina.sh run >> log.txt

This is the end of the “Secure Software Development” article. Thank you for reading. If you are interesting on my article, make sure to follow my other articles as well. Make sure to leave a comment.