Re: Resend: SSL portability and Coyote

2002-04-30 Thread Eric Rescorla
Bill Barker [EMAIL PROTECTED] writes: From: Eric Rescorla [EMAIL PROTECTED] Bill Barker [EMAIL PROTECTED] writes: Also, somebody in o.a.c.tomcat4 needs to fire the ACTION_REQ_SSL_ATTRIBUTE action. That's the Coyote replacement for CertificateValve. Ah. Can you give me the 10,000

Re: Resend: SSL portability and Coyote

2002-04-29 Thread Nick Betteridge
Eric Rescorla wrote: Nick Betteridge [EMAIL PROTECTED] writes: Eric Rescorla wrote: This didn't make it out the first time so I'm resending... I'm looking at what needs to be done to make the 3.3 SSL portablity stuff work properly with Coyote. For the most part, this work has

Re: Resend: SSL portability and Coyote

2002-04-29 Thread Nick Betteridge
Erik This is what I'm currently using for Catalina as a SSLServerSocketFactory - some of it may look familiar! rgds import java.io.InputStream; import java.io.IOException; import java.net.InetAddress; import java.net.ServerSocket; import java.net.Socket; import

RE: Resend: SSL portability and Coyote

2002-04-29 Thread GOMEZ Henri
(2) JSSE uses one keyfile (the keystore). PureTLS uses three, the keyfile, the CA file, and the random file. I need to add new directives to ServerSocketFactory to propagate those. I couldn't tell you how many questions I've got after releasing my SSL documentation for tomcat 3.2/3.3. The

Re: Resend: SSL portability and Coyote

2002-04-29 Thread Eric Rescorla
GOMEZ Henri [EMAIL PROTECTED] writes: I even like to have server cert and key in differents files (à la mod_ssl), and even use the code from Bojan 'PasswordPrompter' when the key is protected by password I like prompting for the password too. Is the code for this already in Tomcat

RE: Resend: SSL portability and Coyote

2002-04-29 Thread Larry Isaacs
The current implementation is available in the jakarta-tomcat tree under proposals/PasswordPrompter. Cheers, Larry -Original Message- From: Eric Rescorla [mailto:[EMAIL PROTECTED]] Sent: Monday, April 29, 2002 10:21 AM To: Tomcat Developers List Subject: Re: Resend: SSL

Re: Resend: SSL portability and Coyote

2002-04-28 Thread Eric Rescorla
Bill Barker [EMAIL PROTECTED] writes: I can arrange for this to get called, but I'm not even sure where to look to arrange it. I'm not sure either, which is why I'm talking about it instead of doing it :). My guess would be o.a.c.tomcat4.CoyoteAdapter.postParseRequest. However, the

Re: Resend: SSL portability and Coyote

2002-04-27 Thread Eric Rescorla
Nick Betteridge [EMAIL PROTECTED] writes: Eric Rescorla wrote: This didn't make it out the first time so I'm resending... I'm looking at what needs to be done to make the 3.3 SSL portablity stuff work properly with Coyote. For the most part, this work has been done--if you set the

Re: Resend: SSL portability and Coyote

2002-04-27 Thread Eric Rescorla
Bill Barker [EMAIL PROTECTED] writes: From: Eric Rescorla [EMAIL PROTECTED] I assume you mean actions. They are defined in o.a.c.ActionCode, and processed by somebody implementing o.a.c.ActionHook (both under the coyote directory). For the HTTP/1.1 connector, this is

Re: Resend: SSL portability and Coyote

2002-04-26 Thread Bill Barker
: Resend: SSL portability and Coyote This didn't make it out the first time so I'm resending... I'm looking at what needs to be done to make the 3.3 SSL portablity stuff work properly with Coyote. For the most part, this work has been done--if you set the SSLImplementation appropriately

Re: Resend: SSL portability and Coyote

2002-04-26 Thread Eric Rescorla
Bill Barker [EMAIL PROTECTED] writes: Also, somebody in o.a.c.tomcat4 needs to fire the ACTION_REQ_SSL_ATTRIBUTE action. That's the Coyote replacement for CertificateValve. Ah. Can you give me the 10,000 overview on how ATTRIBUTES work (or point me to the right location)? I can arrange for

Re: Resend: SSL portability and Coyote

2002-04-26 Thread Bill Barker
- Original Message - From: Eric Rescorla [EMAIL PROTECTED] To: Tomcat Developers List [EMAIL PROTECTED] Sent: Friday, April 26, 2002 5:38 PM Subject: Re: Resend: SSL portability and Coyote Bill Barker [EMAIL PROTECTED] writes: Also, somebody in o.a.c.tomcat4 needs to fire

Re: Resend: SSL portability and Coyote

2002-04-26 Thread Nick Betteridge
Eric Rescorla wrote: This didn't make it out the first time so I'm resending... I'm looking at what needs to be done to make the 3.3 SSL portablity stuff work properly with Coyote. For the most part, this work has been done--if you set the SSLImplementation appropriately and the correct