[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: No org.apache.catalina.net.SSLServerSocketFactory in catalina.jar as part of libtomcat4-java



Ian Stevens wrote:

I did a bit of checking and, unfortunately, the class
org.apache.catalina.net.SSLServerSocketFactory is not in
/usr/share/tomcat4/server/lib/catalina.jar as it is in the Windows
version (I have not checked the Linux version available from the Apache
website) nor is it in any of the other JAR files included in the
libtomcat4-java package.  Why is that?  I assume that this is a
licensing issue.

Unfortunately, you have not mentioned the version of the tomcat4 package that you have tried. Versions prior to 4.0.4-1 were built with JDK 1.3 so the SSL classes could not be compiled. The current versions in testing (4.0.4-4) and unstable (4.1.12-1) do include the SSL classes:

> unzip -l server/lib/catalina.jar | grep SSLServerSocketFactory
6687 09-25-02 00:13 org/apache/catalina/net/SSLServerSocketFactory.class

If you are using 4.0.3-1 from Debian 3.0 (woody), there is an explanation in README.Debian why the SSL classes are not included.

So if you want to use an SSL connector, you need to use the version from testing or unstable and JDK 1.4. I'd recommend the tomcat4 version from unstable since it fixes a security problem. It required some other Java packages from unstable, but they can be installed on Debian 3.0 without any problems.

--
Stefan Gybas



Reply to: