Re: SSL issue

2011-08-26 Thread Crypto Sal
On 08/26/2011 11:24 AM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Savitha, On 8/25/2011 7:01 PM, Savitha Akella wrote: Connector protocol=org.apache.coyote.http11.Http11Protocol port=443 maxThreads=150 scheme=https secure=true SSLEnabled=true Okay.

Re: SLL Certificate Chain

2011-05-23 Thread Crypto Sal
On 05/23/2011 04:53 AM, Dipl.-Ing. Mag. Bernhard Hobiger wrote: Hi, I am running Tomcat 6.0.18 64bit on Windows Server 2008 R2 Enterprise. I obtained a certificate for my server from StartCom, installed it and configured the Connector. The server, intermediate and root certificates are in a

Re: Need help with SSL Certificate install on Tomcat 6.0.29 APR.

2011-04-19 Thread Crypto Sal
Hi Jin, In my experiences with the APR and Tomcat, you need to use 'OpenSSL' to generate the keypair (CSR/key) I am fairly certain the APR can't read Java Keystore files. You would only use a keystore (JKS) using 'keytool' with JSSE. I think you have at least 2 options at this point: 1.

Re: Issues with Tomcat 6.0 Renewing SSL cert using keytool

2011-02-14 Thread Crypto Sal
Hi Sean, Have you tried to specify just TLS or SSL for the sslProtocol? You presently have this set at TLSv1, which I do not believe is valid. http://tomcat.apache.org/tomcat-6.0-doc/config/http.html --Sal On 02/14/2011 02:46 PM, Sean Killeen wrote: It doesn't -- it tells me that a

Re: Tomcat 5.5.23 with SSL

2011-02-14 Thread Crypto Sal
Hi Alexander, As Mark has previously mentioned, there's no entry type of 'privateKeyEntry' which is *required* for the certificate to work. I suspect what has happened is that you might not have been in the directory with your keystore file or you did not specify the right keystore as

Re: SSL Certificate : Unable to configure Tomcat server.xml

2010-10-26 Thread Crypto Sal
On 10/26/2010 04:08 AM, Richard da Silva wrote: Thanks for your response, Darryl But, the certificate is not the problem. The Tomcat Configuration is the issue (server.xml) Richard da Silva Richard, Are you sure that the certificate isn't also the problem? As Brett has previously

Re: Installing certificate chain on Tomat

2010-04-10 Thread Crypto Sal
On 04/10/2010 12:01 AM, /U wrote: i am installing certificate chain on tomcat 6.x (JRE 1.6). From my CA I have private key (PEM), identity cert (PEM) (CA X trusts myhost) and a cert chain file (PEM file) (entrust trusts CA X) The cert chain is: (entrust) === trusts == (CA X) ==

Re: Multiple SSL certificates on same server

2010-03-08 Thread Crypto Sal
On 03/08/2010 06:46 PM, Richard Huntrods wrote: Does anyone know if it is possible, or has anyone done this: I have two applications running on a single server. The applications use different domains and URLs, so the single Tomcat instance can easily tell them apart. (Note: this part is

Re: Tomcat 5 SSL keytool error: java.lang.Exception: Public key in reply and keystore don't match

2009-10-20 Thread Crypto Sal
Nicholas, You bring up a good point about the alias. It's what I feel most people mess up on when installing SSL Certificates to a keystore. If no alias is specified upon creation of the keystore, the alias is mykey. You can import ANY certificate you want into the keystore. You don't need

Re: Apache/Tomcat with SSL

2009-09-28 Thread Crypto Sal
Miguel, Do you have Tomcat serving up Port 80 traffic or is that Apache's httpd? I suggest you have one web server handle both normal web traffic and SSL traffic (if possible), since this page is a login page, you might want to FORCE https on that page and not allow HTTP. It would almost

Re: SSL with multiple Tomcat instances

2009-08-26 Thread Crypto Sal
Don, It's very strange that one works and the other does not especially since they're from the same CA and presenting the same information. (Just different common names) I can't connect to your external site [webadvisor] via Firefox 3.5 or Chrome 4.0 due to the fact that your CA's OCSP responder

Re: SSL with multiple Tomcat instances

2009-08-26 Thread Crypto Sal
, is it? Thanks again Don -- Don Prezioso Director of Administrative I.T. Ashland University Ashland, Ohio -Original Message- From: Crypto Sal [mailto:crypto@gmail.com] Sent: Wednesday, August 26, 2009 4:48 PM To: Tomcat Users List Subject: Re: SSL with multiple Tomcat instances Don, It's very

Re: SSL with multiple Tomcat instances

2009-08-26 Thread Crypto Sal
Prezioso Director of Administrative I.T. Ashland University Ashland, Ohio From: Crypto Sal [crypto@gmail.com] Sent: Wednesday, August 26, 2009 7:55 PM To: Tomcat Users List Subject: Re: SSL with multiple Tomcat instances Don, ipsCA is having some issues

Re: SSL with multiple Tomcat instances

2009-08-25 Thread Crypto Sal
Don, No problem. You're seeing valid output and yes a Root certificate is self-signed. As per the TLS protocol, it's optional and doesn't need to be there for things to function. What's strange is it's the same output as the webadvisor instance, outside of the FQDN entries of course. When

Re: SSL with multiple Tomcat instances

2009-08-24 Thread Crypto Sal
is not (I am connecting from on campus) b) The webadvisor instance is using the network device eth0, and webui is using eth0:0 Don -- Don Prezioso Director of Administrative I.T. Ashland University Ashland, Ohio -Original Message- From: Crypto Sal [mailto:crypto@gmail.com] Sent

Re: SSL with multiple Tomcat instances

2009-08-20 Thread Crypto Sal
Hi Don, Is this Tomcat for Windows or Tomcat for a UNIX variant? Have you verified the keystore as correct via * keytool -v -list -keystore KEYSTORE_PATH/FILE* ? (Redirect that text to a file if need be!) Did you use the *-trustcacerts* flag upon importing the certificates or was this