Re: Where Tomcat webapp contexts live on Debian

2017-08-15 Thread Peter Kreuser
I'd assume the service that starts tomcat sets the bin-Dir, that contains a setenv.sh, that has the CATALINA_HOME and BASE env-Varaibles, where you find the context-Files that have a docbase. I'd like to repeat the question: who did this setup? Peter Kreuser > Am 15.08.2017 um 23:45 schrieb

Re: 2 Way SSL integration with Webservices - Inbound connection not trusted

2017-08-15 Thread Vinoth Raja
Hi Chris, In the above conversation, the server presents the list of acceptable client certificates to the client. Does that happen for you? [ Yes . It prints the list of acceptable certificate when certificateVerification is set to required. It prints the acceptable certificates from cacerts.

Where Tomcat webapp contexts live on Debian

2017-08-15 Thread James H. H. Lampert
I think I've mentioned before that I have a Tomcat server on a Google Compute Debian instance, that I installed with an "apt-get," rather than from an Apache download. I had to apt-get manager separately, which is odd to begin with. And things ended up in unexpected places. Some stuff (like

Re: 2 Way SSL integration with Webservices - Inbound connection not trusted

2017-08-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Vinoth, On 8/15/17 11:42 AM, Vinoth Raja wrote: > clientAuth="true" Is not valid attribute for connector in tomcat > 8.5.15. I have tried setting certificateVerifucation as required > but application URL is not reachable and it was complaining

RE: 2 Way SSL integration with Webservices - Inbound connection not trusted

2017-08-15 Thread Macca, Diego
Hi, I didn't know that clientauth is deprecated in 8.5. We still use the good 8. I have understood that your tomcat receive connections, not act as a client. If it a server you configure the truststore in tomcat itself (and we also configure it in the JVM but should not be needed), if it act as

Re: Per EndPoint Threads???

2017-08-15 Thread Owen Rubel
Owen Rubel oru...@gmail.com On Tue, Aug 15, 2017 at 8:23 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Owen, > > On 8/13/17 10:46 AM, Owen Rubel wrote: > > Owen Rubel oru...@gmail.com > > > > On Sun, Aug 13, 2017 at 5:57

Re: 2 Way SSL integration with Webservices - Inbound connection not trusted

2017-08-15 Thread Vinoth Raja
Hi Diego, Thanks. clientAuth="true" Is not valid attribute for connector in tomcat 8.5.15. I have tried setting certificateVerifucation as required but application URL is not reachable and it was complaining about certificate. Can I set the truststore in SSLContext before making outbound

Re: Per EndPoint Threads???

2017-08-15 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Owen, On 8/13/17 10:46 AM, Owen Rubel wrote: > Owen Rubel oru...@gmail.com > > On Sun, Aug 13, 2017 at 5:57 AM, Christopher Schultz < > ch...@christopherschultz.net> wrote: > > Owen, > > On 8/12/17 12:47 PM, Owen Rubel wrote: What I am

RE: 2 Way SSL integration with Webservices - Inbound connection not trusted

2017-08-15 Thread Macca, Diego
Hi, You need to set clientAuth="true" in the connector or, for some reason unknown to me (probably something changed in Java from rel. 6/7 on), Tomcat will not enforce the 2 way ssl. You can see what is going on (certificates exchange) with an ssl debug. Kind Regards, Diego Macca Senior IT

2 Way SSL integration with Webservices - Inbound connection not trusted

2017-08-15 Thread Vinoth Raja
Hi, Please advise on the step to resolve the issue encountered in 2way SSL Tomcat version used : apache-tomcat-8.5.15 Java Version used: jdk1.8.0_131 *Problem statement: *Tomcat doesn't trust the inbound connection. We have web application deployed in tomcat and it integrated with web