[I’m assuming this thread is in the right place; if not, I welcome it being move to the right area.]
Hi all,
Some background: I’ve been doing a lengthy upgrade of some legacy software that is running on Tomcat. Due to security issues, we’ve had to upgrade to Tomcat 6.0.28 (our previous upgrade path utilized 6.0).
Current Setup: We are currently running Windows Server 2003 (a clean slate, no IIS, etc.) with Apache Tomcat running some web applications that connect to an application server.
TLS Encryption: I’m currently using a not-too-documented feature of server.xml – the “protocols” attribute (set to “TLSv1”) to enforce TLS on the Tomcat side and not let it fall back to SSL encryption in the absence of TLS. For for more information on it, you can see this blog post (disclosure: the blog is mine but provided here for informational purposes only)
The problem: Tomcat 6.0 starts up fine (though it has an issue with the certificate – this just produces a warning, and I believe it to be a separate issue that I’m working on).
However, Tomcat 6.0.28 does not start, and instead produces the error:
Socket bind failed: [730048] Only one usage of each socket address (protocol/network address/port) is normally permitted.
However, I’m only using one connector and it doesn’t appear that anything else is taking up the port. I changed it to a different port than Tomcat 6.0 or any other service, made sure tomcat 6.0 was shut down, and ran tomcat 6.0.28.
A “netstat -ao” yields the following:
Active Connections
Proto Local Address Foreign Address State PID
TCP wsbflowtsweb:epmap wsbflowtsweb.[redacted]:0 LISTENING 716
TCP wsbflowtsweb:microsoft-ds wsbflowtsweb.[redacted]:0 LISTENING 4
TCP wsbflowtsweb:1025 wsbflowtsweb.[redacted]:0 LISTENING 440
TCP wsbflowtsweb:3389 wsbflowtsweb.[redacted]:0 LISTENING 1664
TCP wsbflowtsweb:5152 wsbflowtsweb.[redacted]:0 LISTENING 1476
TCP wsbflowtsweb:5152 wsbflowtsweb.[redacted]:1240 CLOSE_WAIT 1476
TCP wsbflowtsweb:netbios-ssn wsbflowtsweb.[redacted]:0 LISTENING 4
TCP wsbflowtsweb:3389 h056078.[redacted]:2372 ESTABLISHED 1664
UDP wsbflowtsweb:microsoft-ds : 4
UDP wsbflowtsweb:isakmp : 440
UDP wsbflowtsweb:4500 : 440
UDP wsbflowtsweb:ntp : 816
UDP wsbflowtsweb:ntp : 816
UDP wsbflowtsweb:netbios-ns : 4
UDP wsbflowtsweb:netbios-dgm : 4
My server.xml connector looks like the following (same as 6.0):
<Connector
port="8443"
protocol="HTTPS/1.1"
protocols="TLSv1"
SSLEnabled="true"
enableLookups="false"
acceptCount="100"
maxThreads="200"
scheme="https"
keystoreFile="d:\\keystore\\.keystore"
keystorePass="[redacted]"
secure="true"
clientAuth="false"
sslProtocol="TLSv1"
cipher="AES"
allowUnsafeLegacyRenegotiation="false"
/>
Any advice? I’ve been scouring Google, etc. but I’m not quite sure where to start.
Thanks in advance for any help you can give!