Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-30 Thread Chad La Joie
Yep, this is a problem. And, as I said, we don't have keystores, so even if it did pick up the new cert it still wouldn't work for us. jean-frederic clere wrote: OK I have added a new CA using: +++ [EMAIL PROTECTED]:~ $JAVA_HOME/bin/keytool -import -trustcacerts -file

Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-29 Thread jean-frederic clere
Chad La Joie wrote: jean-frederic clere wrote: Chad La Joie wrote: Yeah, I know what mod-ssl says, and for most cases it's probably right, however the optional_no_ca option is interesting to us because it provides exactly the functionality that we need; accepting the client cert, putting

Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-28 Thread jean-frederic clere
Chad La Joie wrote: Hey guys, I was wondering if there were any thoughts on this particular suggestion. I hadn't seen anything on the list. Have you tried to use keystoreType=PKCS12 in the connector? Chad La Joie wrote: Good Morning, I work on the Internet2 Shibboleth project and

Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-28 Thread jean-frederic clere
Chad La Joie wrote: Hey guys, I was wondering if there were any thoughts on this particular suggestion. I hadn't seen anything on the list. BTW: mod-ssl says: +++ In practice only levels none and require are really interesting, because level optional doesn't work with all browsers and

Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-28 Thread Chad La Joie
Yeah, I know what mod-ssl says, and for most cases it's probably right, however the optional_no_ca option is interesting to us because it provides exactly the functionality that we need; accepting the client cert, putting it in a standard place, and allowing our application to do the verification

Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-28 Thread jean-frederic clere
Chad La Joie wrote: Yeah, I know what mod-ssl says, and for most cases it's probably right, however the optional_no_ca option is interesting to us because it provides exactly the functionality that we need; accepting the client cert, putting it in a standard place, and allowing our application

Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-28 Thread Chad La Joie
jean-frederic clere wrote: Chad La Joie wrote: Yeah, I know what mod-ssl says, and for most cases it's probably right, however the optional_no_ca option is interesting to us because it provides exactly the functionality that we need; accepting the client cert, putting it in a standard

Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread Chad La Joie
Hey guys, I was wondering if there were any thoughts on this particular suggestion. I hadn't seen anything on the list. Chad La Joie wrote: Good Morning, I work on the Internet2 Shibboleth project and we've run in to an issue with client cert authentication in a stand alone Tomcat

Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: Re: Re: Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: Re: Re: Re: Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: Re: Re: Re: Re: Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: Re: Re: Re: Re: Re: Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

RE: Feature Request

2000-12-29 Thread Paulo Gaspar
in windows than Apache + Tomcat. So, I agree with Jon on this one. I guess he is not a (complete) asshole. =;o) Have fun, Paulo Gaspar -Original Message- From: Jon Stevens [mailto:[EMAIL PROTECTED]] Sent: Friday, December 29, 2000 00:00 To: [EMAIL PROTECTED] Subject: Re: Feature Request

Re: Feature Request

2000-12-29 Thread Jon Stevens
on 12/29/2000 4:29 AM, "Paulo Gaspar" [EMAIL PROTECTED] wrote: I (a guy whom still committed nothing) would like very much to have such feature. For our development environment would be fine since it is convenient for us to have Tomcat in many non programmer workstations ('cause of JSP

Re: Feature Request

2000-12-28 Thread Glenn Nielsen
This would be way down on my list of priorities for a Jakarta project. If I needed mod_rewrite for testing I would install Apache on my local development system. Why "reinvent the wheel" just for testing. Besides, I would still want to test the stuff developed locally on Apache with

Re: Feature Request

2000-12-28 Thread Jon Stevens
on 12/28/2000 2:25 PM, "Glenn Nielsen" [EMAIL PROTECTED] wrote: This would be way down on my list of priorities for a Jakarta project. It doesn't have to be a Jakarta Project. I never suggested that. If I needed mod_rewrite for testing I would install Apache on my local development system.

Re: Feature Request

2000-12-28 Thread javabettin
Is this not already an action item for catalina?? (RewriteValve) Dave --- Jon Stevens [EMAIL PROTECTED] wrote: on 12/28/2000 2:25 PM, "Glenn Nielsen" [EMAIL PROTECTED] wrote: This would be way down on my list of priorities for a Jakarta project. It doesn't have to be a Jakarta

Re: Feature Request

2000-12-28 Thread Glenn Nielsen
Jon Stevens wrote: on 12/28/2000 2:25 PM, "Glenn Nielsen" [EMAIL PROTECTED] wrote: This would be way down on my list of priorities for a Jakarta project. It doesn't have to be a Jakarta Project. I never suggested that. If I needed mod_rewrite for testing I would install Apache on my

Re: Feature Request

2000-12-28 Thread Jon Stevens
on 12/28/2000 5:28 PM, "Glenn Nielsen" [EMAIL PROTECTED] wrote: Apache mod_rewrite is very cool, it comes in handy at times. Your feature request didn't contain much justifiying why it was needed. I'm sure you have your reasons, go for it. I thought its "cool"ness clearly justifies it. love