Re: [OT] tomcat 8.5.37, Http11Nio2Protocol (OpenSSL), clientAuth or certificateVerification options

2019-02-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 2/12/19 13:27, Mark Thomas wrote: > Try again. Prompted for certificate. Select valid cert. Connection > refused. Ah. the trust store again. Switch back to the OpenSSL > config. This is a real point of confusion for users... the

RE: Tomcat configuration on proxy_ajp.conf

2019-02-12 Thread Propes, Barry L
Ok, thanks, Stephane. I'll work on configuring it similarly to what I had on my old one. -Original Message- From: [External] Stephane Passignat Sent: Tuesday, February 12, 2019 4:00 PM To: Tomcat Users List Subject: Re: Tomcat configuration on proxy_ajp.conf Hello, Just load ajp

Re: tomcat 8.5.37, Http11Nio2Protocol (OpenSSL), clientAuth or certificateVerification options

2019-02-12 Thread John Palmer
You're (both) quite right, my apologies. (this is embarrassing) In my defense, I've been bouncing back and forth between my personal desktop machine (windows 10) where I was having this issue... and a development server, where this was working just fine. While at lunch, it occurred to me to

Re: Tomcat configuration on proxy_ajp.conf

2019-02-12 Thread Stephane Passignat
Hello, Just load ajp module at least one. No matter if it appears in several file. Apache raised some warning. I didn't see side effect on tomcat or apache if it's loaded several time. Be sure to set it up only once per vhost. My experience is, my apache servers have mostly standard conf setup

Tomcat configuration on proxy_ajp.conf

2019-02-12 Thread Propes, Barry L
Hi folks, First I apologize if this seems more like an Apache question rather than a Tomcat question. I just got an upgraded Red Hat Linux build from 6 to 7, and Apache went from 2.2.15 to 2.4.6. In my older Red hat 6 build, I've got a tomcat.conf file that handles ProxyPass and

Re: Server Name Identification (SNI) configuration Tomcat 8.5.23

2019-02-12 Thread Herb Burnswell
On Tue, Feb 12, 2019 at 11:37 AM Herb Burnswell wrote: > > > On Tue, Feb 12, 2019 at 11:26 AM Mark Thomas wrote: > >> On 12/02/2019 19:21, Herb Burnswell wrote: >> > All, >> > >> > Tomcat: 8.5.23 >> > OS: RHEL 7.5 >> > >> > I am attempting to set up Tomcat to use two keystore's with SNI.

Re: Server Name Identification (SNI) configuration Tomcat 8.5.23

2019-02-12 Thread Herb Burnswell
On Tue, Feb 12, 2019 at 11:26 AM Mark Thomas wrote: > On 12/02/2019 19:21, Herb Burnswell wrote: > > All, > > > > Tomcat: 8.5.23 > > OS: RHEL 7.5 > > > > I am attempting to set up Tomcat to use two keystore's with SNI. Tomcat > > starts successfully but but I receive a timeout when trying to

Re: Server Name Identification (SNI) configuration Tomcat 8.5.23

2019-02-12 Thread Mark Thomas
On 12/02/2019 19:21, Herb Burnswell wrote: > All, > > Tomcat: 8.5.23 > OS: RHEL 7.5 > > I am attempting to set up Tomcat to use two keystore's with SNI. Tomcat > starts successfully but but I receive a timeout when trying to access > either of the defined server names. > As mentioned, Tomcat

Server Name Identification (SNI) configuration Tomcat 8.5.23

2019-02-12 Thread Herb Burnswell
All, Tomcat: 8.5.23 OS: RHEL 7.5 I am attempting to set up Tomcat to use two keystore's with SNI. Tomcat starts successfully but but I receive a timeout when trying to access either of the defined server names. Here is a single server name configuration that works successfully: Here is the

Re: tomcat 8.5.37, Http11Nio2Protocol (OpenSSL), clientAuth or certificateVerification options

2019-02-12 Thread Mark Thomas
On 12/02/2019 17:21, John Palmer wrote: > using the old Connector/clientAuth="true" or the new > Connector/SSLHostConfig/ certificateVerification="REQUIRED" (tried > lowercase and without the D) format..doesn't seem to work properly. > > no matter what value I use or which format... the

Re: Documentation difference between Apache Tomcat 8.0 and 8.5

2019-02-12 Thread Konstantin Kolinko
вт, 12 февр. 2019 г. в 17:28, Christopher Schultz : > > -BEGIN PGP SIGNED MESSAGE- > > Maybe so you can use syslog to aggregate all your logs? IFAIK, there > is not a good way to send JULI logging to syslog, but log4j supports it. Certainly, there exists a way. I have not used it yet

Re: tomcat 8.5.37, Http11Nio2Protocol (OpenSSL), clientAuth or certificateVerification options

2019-02-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John, On 2/12/19 12:21, John Palmer wrote: > using the old Connector/clientAuth="true" or the new > Connector/SSLHostConfig/ > certificateVerification="REQUIRED" (tried lowercase and without the > D) format..doesn't seem to work properly. > > no

tomcat 8.5.37, Http11Nio2Protocol (OpenSSL), clientAuth or certificateVerification options

2019-02-12 Thread John Palmer
using the old Connector/clientAuth="true" or the new Connector/SSLHostConfig/ certificateVerification="REQUIRED" (tried lowercase and without the D) format..doesn't seem to work properly. no matter what value I use or which format... the behavior seems to be that the client cert is

Re: Documentation difference between Apache Tomcat 8.0 and 8.5

2019-02-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 2/12/19 05:51, Mark Thomas wrote: > On 12/02/2019 09:24, Sashidharan Ramamurthy wrote: >> Hi Tomcat User group, >> >> In the "Logging In Tomcat" page, in 8.0 version, there is a link >> and section detailing how to use Apache log4j

Re: StaticMembers within Multiple Clusters

2019-02-12 Thread Tim K
On Tue, Feb 12, 2019, 3:17 AM Keiichi Fujino wrote: > > Are you using SSO(org.apache.catalina.authenticator.SingleSignOn)? > DeltaManager/BackupManager replicate sessions. They do not replicate SSO > entries. > > If you want to replicate SSO Entry in cluster, you can use > ClusterSingleSignOn. >

OCSP Stapling with Tomcat 8.5

2019-02-12 Thread logo
Hi all, I’m wondering why I get OCSP Must StapleSupported, OCSP response not stapled Revocation information OCSP OCSP: http://ocsp.int-x3.letsencrypt.org with the SSLlabs check on both the JSSE and the APR connector. The same cert is working on Apache or Nginx. My version info is:

Re: Documentation difference between Apache Tomcat 8.0 and 8.5

2019-02-12 Thread Mark Thomas
On 12/02/2019 09:24, Sashidharan Ramamurthy wrote: > Hi Tomcat User group, > > In the "Logging In Tomcat" page, in 8.0 version, there is a link and section > detailing how to use Apache log4j instead of "java.util.logging" > > But the same content is not visible in 8.5 version. > > My query is

Documentation difference between Apache Tomcat 8.0 and 8.5

2019-02-12 Thread Sashidharan Ramamurthy
Hi Tomcat User group, In the "Logging In Tomcat" page, in 8.0 version, there is a link and section detailing how to use Apache log4j instead of "java.util.logging" But the same content is not visible in 8.5 version. My query is whether from 8.5 or above, is the capability of using apache log4j

Documentation difference between Apache Tomcat 8.0 and 8.5

2019-02-12 Thread Sashidharan Ramamurthy
Hi Tomcat User group, In the "Logging In Tomcat" page, in 8.0 version, there is a link and section detailing how to use Apache log4j instead of "java.util.logging" But the same content is not visible in 8.5 version. Please note both pages reference below.

Re: StaticMembers within Multiple Clusters

2019-02-12 Thread Keiichi Fujino
2019年2月12日(火) 1:28 Tim K : > On Fri, Jan 18, 2019, 12:44 PM Tim K wrote: > > > On Fri, Jan 18, 2019 at 11:05 AM Christopher Schultz > > wrote: > > > > > > -BEGIN PGP SIGNED MESSAGE- > > > Hash: SHA256 > > > > > > Tim, > > > > > > On 1/18/19 06:38, Tim K wrote: > > > > Thanks for this.