DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=31856>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=31856

Private key encoded by Java causes crash with SSLProxyMachineCertificateFile





------- Additional Comments From [EMAIL PROTECTED]  2004-10-22 22:41 -------
Test environment setup:

1. To set up an instance of Tomcat 5.0.28, download the Tomcat 5.0.28 config
file (rename to "server.xml" and replace the default server.xml), and create a
self-signed certificate and key called keystore.jks (password: pass00) using the
Java keytool.

2. Download the Apache config file, rename to "httpd.conf", and replace the
default httpd.conf file.  You will have to change the following items in this 
file:

- "W.X.Y.Z" with a local IP address to which to bind
- "local.host.name" with the local hostname for the "W.X.Y.Z" IP address
- "remote.host.name" with the remote hostname (to which Tomcat is bound)

You will also have to create a certificate and a private key called
"local-ssl.crt" and "local-ssl.key" to run SSL on Apache (or optionally disable
these directives).

3. Download 31856.jks and place it in Tomcat's conf directory.

4. Download crashapache2-bad.crtky and crashapache2.crtkey and place them in
Apache's conf directory.  Rename crashapache2-bad.crtkey to crashapache2.crtkey
to test the crash condition.

5. Restart both servers and test.

Note that you may also use OpenSSL to create a pkcs12 file from the certificate
and the private key (see http://mark.foster.cc/kb/openssl-keytool.html) to test
hitting Tomcat directly from a web browser.  Simply import the pkcs12 file into
"Your Certificates" in Mozilla or Firefox to test this.

Whew!  I hope that's enough info to reproduce this issue.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to