0

I am working on Link-OS web-service with self-signed CA.

I followed this to create a self-signed CA

I deployed the printer server by following these instructions https://github.com/ZebraDevs/LinkOS-Webservices-Samples

Whenever I add this part to server.xml, no page will work including localhost:8080 although the server is running without showing or throwing errors or exceptions.

<Connector 
     protocol="org.apache.coyote.http11.Http11AprProtocol"
     SSLEnabled="true" SSLProtocol="TLSv1+TLSv1.1+TLSv1.2"  
     maxThreads="200" port="8443" SSLVerifyClient="optional"
     scheme="https" secure="true"
     SSLCertificateFile="C:\cert\SERVER.crt" 
     SSLCertificateKeyFile="C:\cert\SERVER.key" 
     />

what could go wrong with these steps? I have followed them step by step

I am using:

  • Java 8
  • Tomcat 7
  • APR 1.7

following this solution will make the server works fine, but it won't work with the printers, so it is not what I am looking for.

Olaf Kock
  • 46,930
  • 8
  • 59
  • 90
JAZWii
  • 47
  • 6

1 Answers1

1

You used an APR Connector here. (protocol="org.apache.coyote.http11.Http11AprProtocol")

APR implementation needs Apache Portable Runtime (APR) and Tomcat Native library.

You can install them with these commands:

apt install libtcnative-1
apt install libapr1-dev libssl-dev

or if either package is not found, try this answer.

I think you should implement cert-sign certification without APR, because an APR connector needs extra libraries. İf you want, try these instructions.

Josiah Yoder
  • 3,321
  • 4
  • 40
  • 58
A.Kemal
  • 11
  • 1
  • Because APR connector needs extra libraries. So implementation is a little difficult. – A.Kemal Nov 26 '20 at 10:41
  • thank you for your answer, not sure if it is what I am looking for, but can you tell me how should be the structure of the Tomcat's connector using the generated files by following these instructions? https://supportcommunity.zebra.com/s/article/How-to-Create-Self-Signed-Server-and-Device-Certificates-for-Weblink-Websockets-Connections?language=en_US – JAZWii Dec 01 '20 at 11:33
  • 2
    you sould add SSLCertificateChainFile="/opt/tomcat/ssl/bundle.ca-bundle". for bundle: https://support.globalsign.com/ca-certificates/root-certificates/root-intermediate-certificate-bundles – A.Kemal Dec 04 '20 at 11:10