Re: 2 Factor Authentication Tomcat 7

2018-10-23 Thread Will Nordmeyer
using JDBC connection to oracle database. > > Just forget about tomcat. I cannot find out of the box jdbc 2fa feature from > oracle. > > > > On Oct 23, 2018, at 11:03 AM, Will Nordmeyer wrote: > > > > Chris, > > > > I understand all of th

Re: 2 Factor Authentication Tomcat 7

2018-10-23 Thread Will Nordmeyer
- > Hash: SHA256 > > Will, > > On 10/23/18 10:44, Will Nordmeyer wrote: > > I'm currently running Tomcat 7 (will likely migrate to 8 or 9 in > > the next year). I tried working with Oracle on this with no > > success. > > > > We have an Oracle Database connection de

2 Factor Authentication Tomcat 7

2018-10-23 Thread Will Nordmeyer
I'm currently running Tomcat 7 (will likely migrate to 8 or 9 in the next year). I tried working with Oracle on this with no success. We have an Oracle Database connection defined within our web.xml (see below). We need to convert to using 2 Factor (certificate?) based Authentication. How do

Re: Certificate based database authentication

2018-07-10 Thread Will Nordmeyer
Thanks Andre - I agree it is an oracle driver based question, but sometimes here is faster for answers based on people's own life experience. On Tue, Jul 10, 2018 at 11:26 AM, André Warnier (tomcat) wrote: > Hi. > > On 10.07.2018 15:03, Will Nordmeyer wrote: >> >>

Certificate based database authentication

2018-07-10 Thread Will Nordmeyer
I have an application in Tomcat 7 that connects to an Oracle database. Currently we are connecting using the username/password which is embedded in the xml files. To harden security, we are looking at x509 certificate authentication. Is there a way to tie a certificate to Tomcat hand have them

Re: Tomcat ssl connection to Oracle

2018-06-05 Thread Will Nordmeyer
On Tue, Jun 5, 2018 at 11:07 AM, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Will, > > On 6/5/18 10:37 AM, Will Nordmeyer wrote: >> I'm trying to configure an SSL Oracle connection. I'm running on >> CentOS7 (for

Tomcat ssl connection to Oracle

2018-06-05 Thread Will Nordmeyer
I'm trying to configure an SSL Oracle connection. I'm running on CentOS7 (for my DB Server and my Web Server). Tomcat 7.0.76-6 from the CentOS Repository, httpd 2.4.6-80 from the CentOS Repository on the Web Server Oracle 12.2.0.1 on the Database Server I'm setting up the datasource in my

SSL Session Caching

2013-02-13 Thread Will Nordmeyer
I have a scenario right now I need help with. My Tomcat is configured for SSL, client certificate authorization and Certificate Revocation List checking (all outside certificates). We have a scenario (we've found in testing) where we do a transaction in our application, then the user pulls his

Reporting a revoked certificate

2012-12-21 Thread Will Nordmeyer
At long last, I have tomcat configured, I have revoked certificates to test with... my question today... When I try using a revoked certificate, I get the lovely and meaningful page cannot be displayed. So it is properly denying access - but it doesn't provide appear to provide any other

Re: Reporting a revoked certificate

2012-12-21 Thread Will Nordmeyer
On Fri, Dec 21, 2012 at 8:35 AM, Daniel Mikusa dmik...@vmware.com wrote: On Dec 21, 2012, at 7:35 AM, Will Nordmeyer wrote: At long last, I have tomcat configured, I have revoked certificates to test with… Nice! my question today... When I try using a revoked certificate, I get

Re: Reporting a revoked certificate

2012-12-21 Thread Will Nordmeyer
On Fri, Dec 21, 2012 at 10:30 AM, Daniel Mikusa dmik...@vmware.com wrote: On Dec 21, 2012, at 9:28 AM, Will Nordmeyer wrote: On Fri, Dec 21, 2012 at 8:35 AM, Daniel Mikusa dmik...@vmware.com wrote: On Dec 21, 2012, at 7:35 AM, Will Nordmeyer wrote: At long last, I have tomcat configured, I

Revoked Certificate being accepted

2012-12-11 Thread Will Nordmeyer
I have my Tomcat 6.0.34 installation configured to use APR and tcnative for certificate valiation CRL checking. I have a revoked CRL and when I use the openssl command line to check the certificate, it properly returns certificate revoked. When I try going in through tomcat, however, it prompts

Re: Revoked Certificate being accepted

2012-12-11 Thread Will Nordmeyer
On Tue, Dec 11, 2012 at 2:25 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Will, On 12/11/12 11:43 AM, Will Nordmeyer wrote: I have my Tomcat 6.0.34 installation configured to use APR and tcnative for certificate valiation CRL

Re: Recognizing certificate removal (SmartCard)

2012-12-05 Thread Will Nordmeyer
On Tue, Dec 4, 2012 at 3:07 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Will, On 12/4/12 2:47 PM, Will Nordmeyer wrote: Thanks for the quick response and the thoughts. a 5 minute timeout wouldn't be acceptable in our

Recognizing certificate removal (SmartCard)

2012-12-04 Thread Will Nordmeyer
First off, thanks to all for the assistance getting my other tomcat CRL issues working. Converted to APR and tcnative and things seem to be loading, running well now. Now, the question has come up - what happens when a user authenticates with their Smart Card, but then pulls their card and walks

Re: Recognizing certificate removal (SmartCard)

2012-12-04 Thread Will Nordmeyer
On Tue, Dec 4, 2012 at 12:48 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Will, On 12/4/12 12:46 PM, Christopher Schultz wrote: On 12/4/12 12:08 PM, Will Nordmeyer wrote: First off, thanks to all for the assistance getting my

Re: tomcat6 with crl doesn't load

2012-11-28 Thread Will Nordmeyer
On Tue, Nov 27, 2012 at 5:12 PM, Daniel Mikusa dmik...@vmware.com wrote: On Nov 27, 2012, at 12:56 PM, Will Nordmeyer wrote: On Tue, Nov 27, 2012 at 12:24 PM, Daniel Mikusa dmik...@vmware.com wrote: On Nov 27, 2012, at 9:55 AM, Will Nordmeyer wrote: I have a self signed server certificate

Re: tomcat6 with crl doesn't load

2012-11-28 Thread Will Nordmeyer
On Wed, Nov 28, 2012 at 8:45 AM, Daniel Mikusa dmik...@vmware.com wrote: On Nov 28, 2012, at 8:35 AM, Will Nordmeyer wrote: On Tue, Nov 27, 2012 at 5:12 PM, Daniel Mikusa dmik...@vmware.com wrote: On Nov 27, 2012, at 12:56 PM, Will Nordmeyer wrote: On Tue, Nov 27, 2012 at 12:24 PM, Daniel

Re: tomcat6 with crl doesn't load

2012-11-28 Thread Will Nordmeyer
On Wed, Nov 28, 2012 at 9:03 AM, Will Nordmeyer quark...@gmail.com wrote: On Wed, Nov 28, 2012 at 8:45 AM, Daniel Mikusa dmik...@vmware.com wrote: On Nov 28, 2012, at 8:35 AM, Will Nordmeyer wrote: On Tue, Nov 27, 2012 at 5:12 PM, Daniel Mikusa dmik...@vmware.com wrote: On Nov 27, 2012, at 12

Re: tomcat6 with crl doesn't load

2012-11-28 Thread Will Nordmeyer
On Wed, Nov 28, 2012 at 1:39 PM, André Warnier a...@ice-sa.com wrote: Daniel Mikusa wrote: On Nov 28, 2012, at 11:56 AM, Will Nordmeyer wrote: On Wed, Nov 28, 2012 at 9:03 AM, Will Nordmeyer quark...@gmail.com wrote: On Wed, Nov 28, 2012 at 8:45 AM, Daniel Mikusa dmik...@vmware.com wrote

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Will Nordmeyer
, 2012 at 5:17 PM, Daniel Mikusa dmik...@vmware.com wrote: On Nov 26, 2012, at 3:35 PM, Will Nordmeyer wrote: If Tomcat appears to be hanging with this option enabled, I would suggest taking a thread dump and including it here. Could provide some clues as to what is happening. http

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Will Nordmeyer
, but then goes to Internet Explorer cannot display the webpage. I have a self signed server certificate - and the user certs have no association/connection to the server cert. On Tue, Nov 27, 2012 at 9:27 AM, Daniel Mikusa dmik...@vmware.com wrote: On Nov 27, 2012, at 9:17 AM, Will Nordmeyer wrote: Dan

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Will Nordmeyer
On Tue, Nov 27, 2012 at 12:24 PM, Daniel Mikusa dmik...@vmware.com wrote: On Nov 27, 2012, at 9:55 AM, Will Nordmeyer wrote: I have a self signed server certificate - and the user certs have no association/connection to the server cert. I apologize, but I'm not exactly sure what you

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Will Nordmeyer
On Tue, Nov 27, 2012 at 12:48 PM, Konstantin Kolinko knst.koli...@gmail.com wrote: 2012/11/27 Will Nordmeyer quark...@gmail.com: OK, I upped it to 1024G and it still crashed. I tried loading with a 70M file (the root CA, and the CA directly responsible for my cert). That seemed to load

tomcat6 with crl doesn't load

2012-11-26 Thread Will Nordmeyer
have a new tomcat6.0.34 setup I'm configuring on my CentOS 6.3 (64 bit). I've downloaded a series of CRLs for the certificate authorities I am using, converted them from DER to PEM with openssl: openssl crl -inform DER -outform PEM -in f1.der -out f1.pem_crl openssl crl -inform DER -outform PEM