Re: tomcat problems with SSL / PKCS12

) at java.security.KeyStore.load(KeyStore.java:695) at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:278) any helps out there? fwiw, i've seen tips out there on converting the pkcs12 format into JKS. i'm hoping not to go that route. thanks in advance, kallen -- Dennis Dai

Re: tomcat problems with SSL / PKCS12

PM, Dennis Dai wrote: Hi Kallen, I was able to export a p12 cert with complete chain half a year ago, but I couldn't reproduce it now. However, I found this: http://sense.bigbrother.net/archives/0275.html Maybe you can try it out while I continue playing with openssl ... Dennis On 9/21

Re: Digested passwords

of FreeBSD's md5crypt(). A java implementation of md5crypt() can be found at: http://tools.arlut.utexas.edu/cvsweb/cvsweb.cgi/ganymede/src/md5/MD5Crypt.java?rev=1.12content-type=text/x-cvsweb-markup -- Dennis Dai [EMAIL PROTECTED

Re: tomcat problems with SSL / PKCS12

On 9/21/2004 6:41 PM, [EMAIL PROTECTED] wrote: On Tue, 21 Sep 2004, Dennis Dai wrote: Ok here's the deal with openssl. I'm using OpenSSL 0.9.7d and J2SE 1.4.2_05. Assuming: * server.key - your certificate's private key * server.crt - your certificate * inter.crt - the intermediate CA that signed

Re: Tomcat vs BEA Weblogic?

On 9/20/2004 3:00 PM, Chuck Carson wrote: As far as JBoss goes, I heard a nasty rumor that JBoss might not be around much longer. Well, you do know that there're tomcat developers that work for JBoss on this list, right? ;-) -- Dennis Dai [EMAIL PROTECTED

Re: Tomcat vs BEA Weblogic?

. doesn't count As far as JBoss goes, I heard a nasty rumor that JBoss might not be around much longer. -rhugga -- Dennis Dai [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL

Re: A little offbeat question

] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Dennis Dai [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: SSL certs

'keytool -list' command, you're set. HTH, -- Dennis Dai [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: AW: error: duplicate local variable

to have duplicate variables with the enclosing scope. -- Dennis Dai [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: AW: error: duplicate local variable

for reference) 1st edition page 114: A local variable, already declared in an enclosing block and therefore visible in a nested block, cannot be redeclared in the nested block. So, eclipse's behavior is correct. -- Dennis Dai [EMAIL PROTECTED

Re: Tomcat will not run JSPs

this list somewhat relevant shall we. Fredrik -- Dennis Dai [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Tomcat will not run JSPs

current envirnment settings: L:\echo %java_home% C:\j2sdk1.4.2_05 L:\echo %catalina_home% D:\Program Files\Apache Software Foundation\Tomcat 5.0\webapps\ROOT It STILL doesn't work! //SIGNED// Jerry Nelson -Original Message- From: Dennis Dai [mailto:[EMAIL PROTECTED] Sent: Thursday

Re: Custom authorization

that, IIRC, does what you need. I see it mentioned a lot on the Struts list. -QM -- Dennis Dai [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Where to put Listener Realm instead of server.xml?

it into Context, you can put it into conf/Catalina/localhost/context.xml, thus no need to touch your server.xml ... -- Dennis Dai [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL

Re: Where to put Listener Realm instead of server.xml?

the document before I did the posting, but I guess I didn't look hard enough. :( Thanks for clearing that up! -- Dennis Dai [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Starting Tomcat 5.0.25.

for a few seconds, then : disappears, i.e., Tomcat doesn't seem to be able to startup. The tomcat fails to start question shows up frequently on the list. 1/ check the logs 2/ change startup.bat to pause at the very end, so you can see what's going on etc. -QM -- Dennis Dai [EMAIL

Re: Starting Tomcat 5.0.25.

- From: Dennis Dai [mailto:[EMAIL PROTECTED] Sent: Thursday, August 19, 2004 11:41 AM To: Tomcat Users List Subject: Re: Starting Tomcat 5.0.25. On 8/18/2004 11:03 PM, [EMAIL PROTECTED] wrote: Hi, I am trying to start Tomcat 5.0.25 by running startup.bat through the command prompt. It opens for a flash

Re: tomcat deploys context.xml as a directory

). -- Dennis Dai [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: tomcat deploys context.xml as a directory

know when this would get included in an official version of Tomcat. The version I am using is Tomcat 5.0.27. Also thanks for updating the subject. JP -- Dennis Dai [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED

Re: list admins: unsub user for bounced messages

news -- http://www.RoarNetworX.com -- Dennis Dai [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Server JVM with service startup

\tomcat5w.exe //ES//Tomcat5' and modify the java option there, or modify %JAVA_HOME%\jre\lib\i386\jvm.cfg and move '-server KNOWN' to the top. Note that the latter will apply to any java invocation, which may or may not be desired. -- Dennis Dai [EMAIL PROTECTED

Re: Alternative causes of msg 404 resource not avaialble?

in WEB-INF/classes. and added the corresponding servlet and servlet-mapping tags to web.xml. When I try it out on my desktop server it works fine, but when I redeploy to the department test server I get 404 error. Is there some other configuration/deployment step I am missing? -- Dennis Dai

Re: Wildcard subdomains

of a wildcard. Using Tomcat 5 hooked up to Apache2 using mod-jk2. Any help is appreciated. Thanks. This was discussed a few weeks ago: http://marc.theaimsgroup.com/?t=10899224532r=1w=2 -- Dennis Dai [EMAIL PROTECTED] - To unsubscribe

Re: Letting apache handle 404s

, tomcat - not apache - presents a folder listing. This is an FAQ item: http://jakarta.apache.org/tomcat/faq/misc.html#listing -- Dennis Dai [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail

Re: Newbie - JDBC problem Name is not bound in this context

: ... Context ic = new InitialContext(); DataSource ds = (DataSource) ic.lookup(java:comp/env/jdbc/jimnew); I'm not a JNDI expert but you can try this: Context ic = new InitialContext(); Context ctx = (Context) ic.lookup(java:comp/env); DataSource ds = (DataSource) ic.lookup(jdbc/jimnew); -- Dennis Dai

Re: Problem with SSL configuration

=org.apache.coyote.tomcat5.CoyoteConnector clientAuth=false sslProtocol=TLS keystorePass = binoy/ ^ ^ Can you get rid of these spaces and try again? /Connector -- Dennis Dai [EMAIL PROTECTED

Re: Realm configuration not working

in the context?! This is on Tomcat 5.0.27 under jdk 1.4.2. Any help would be appreciated!! Make sure resource-ref / in web.xml is pointing to the correct resource (ie., the one in the context). -- Dennis Dai [EMAIL PROTECTED

Re: ajp over ssl

determine that automaticly? You can try out stunnel (http://www.stunnel.org/). It doesn't require an established connection like ssh tunnel does. -- Dennis Dai [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED

How to deploy customized realm, authenticator, etc.?

the WAR file into webapps directory. Sure I can put the jar into server/lib, but those really belong to my webapp (ie. not used anywhere else) and I'd really like it to go with my webapp. Any ideas? Thanks. -- Dennis Dai [EMAIL PROTECTED

Re: How to deploy customized realm, authenticator, etc.?

Informatics -Original Message- From: Dennis Dai [mailto:[EMAIL PROTECTED] Sent: Monday, August 02, 2004 12:46 PM To: Tomcat Users List Subject: How to deploy customized realm, authenticator, etc.? In my webapp, I have customized realm and authenticator. I was wondering how they can be easily

Re: [tomcat] Re: Understanding tomcat web administration tool.

: java.lang.IllegalStateException: Context path /admin is already in use What do you mean by properly configuring jsp support? My jsp-examples page loads and works fine. Thanks, Samuel. -- Dennis Dai [EMAIL PROTECTED] - To unsubscribe

Re: How do you set cache-control for static (gif, jpg) resources

headers). As an aside, you can read the enumeration of the init parameters in the filter's init method, store it in some member variable, and that will improve the performance of your filter because you won't have to do it on every request. Yoav Shapira -- Dennis Dai [EMAIL PROTECTED

Re: Progamatically setting values of FORM elements

that will give that item a value. For my particular need, I want to set a number of checkbox elements on or off. I do have the ability to predict the element names... -- Dennis Dai [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL

Re: JSPC/Jasper2 with no package name - bug???

with the package name becoming .user, .admin, which is obviously invalid. How do I achieve what I need? Is this a bug? Can anyone point me in the right direction where the package statement is generated when the java files are created? Many thanks, David -- Dennis Dai [EMAIL PROTECTED

Re: How do you set cache-control for static (gif, jpg) resources

-Original Message- From: Dennis Dai [mailto:[EMAIL PROTECTED] Sent: Friday, July 30, 2004 3:07 PM To: Tomcat Users List Subject: Re: How do you set cache-control for static (gif, jpg) resources I've been reading this thread back and forth for quite a few times :) My observations

Re: JVM memory size changing dramatically

as follows JAVA_OPTS=-server -Xms256m -Xmx768m -XX:NewSize=64m -XX:MaxNewSize=64m -XX:SurvivorRatio=8 -XX:MaxTenuringThreshold=5 -XX:TargetSurvivorRatio=75 -XX:PermSize=32m -XX:MaxPermSize=32m -Xss128k -XX:+DisableExplicitGC -- Dennis Dai [EMAIL PROTECTED

Re: Beyond bassic form authentication?

... No, that won't work. The login page cannot be explicitly referred to. You can only get to the login page when accessing a protected resource ... unless you modify the FormAuthenticator class. -- Dennis Dai [EMAIL PROTECTED

Re: Beyond bassic form authentication?

the login form... Dennis Dai wrote: On 7/27/2004 10:34 AM, Anastasios Angelidis wrote: So if I understand you... On my index page which is not protected put a form with form ... action=j_security_check And somewhere at the top of page have something like if(getUserPrincipal()) redirect I

Re: How to make TC print request info when TC recieves request?

There's a request dumper valve that does exactly this. It is commented out in server.xml by default. On 7/10/2004 11:36 PM, [EMAIL PROTECTED] wrote: Howdy , I am developing webapp using TC4.1.27, when debugging my webapp, I am wondering if TC can print requests to the console or writes request

Re: getting Tomcat 5.0 to serve static content

I'm not familiar with JBoss stuff but I think to make a context work, you'll need the WEB-INF dir and the associated web.xml ... On 7/8/2004 10:23 PM, Matthew Hixson wrote: I'm using Tomcat 5.0.26 with JBoss 3.2.4. I'm attempting to upgrade from Tomcat 4.1.something that was included with

Re: Tomcat works for localhost, but won't work for the local intranet..

RedHat's defualt firewall rules? On 7/9/2004 5:18 PM, Ivan Jouikov wrote: I am running tomcat 5.0.27 on Linux RH 9.0, and I have a little problem. I am using jsvc to launch Tomcat standalone as Tomcat5 user. Everything seems to work fine, when I connect to localhost or 127.0.0.1 from that

Re: Tomcat works for localhost, but won't work for the local intranet..

On 7/9/2004 5:45 PM, Ivan Jouikov wrote: ... I am not that good with iptables, but it seems to me that the line -A RH-Lokkit-0-50-INPUT -p tcp -m tcp --dport 0:1023 --syn -j REJECT Blocks all ports from 0 to 1023 for TCP/IP... I don't recall putting that there, but is that what it really

Re: Tomcat 4.1.30 + SSL = Problems

On 7/8/2004 3:46 PM, Fredrik Liden wrote: I followed the instructions on the tomcat SSL Config page. I generated the .keystore file using changeit password. When I go to the test page http://localhost:8443/ I see 5 squares up in the left corner and that's it. Anyone encountered this?? I'm not

Re: Tomcat 4.1.30 + SSL = Problems

On 7/8/2004 7:39 PM, QM wrote: : Use https://... instead of http://... : : Wow, if only I'd held off a few more minutes on my mail; thanks, this : was my problem as well. Is there a reason there's not a more legible : error? The server expects to complete an SSL-enabled handshake before your

Re: Certificates and SSL Authentication

On 5/26/2004 4:35 PM, Sander Smith wrote: Thanks for your help but my question wasn't answered. I understand certificate chains - I even created some long ones. My question is about SSL specifically. The way I understand the SSL handshake, the server only sends a certificate to the client -

Re: converting a certificate for use on Tomcat

I saw your original post but forgot to reply ... You can use keytool to import the certificate using pkcs12 certificate store (add a '-storetype pkcs12' to keytool's arguments), which is supported by tomcat. Also, if your certificate is signed by an intermediate CA (meaning more than 2 certs on

Re: converting a certificate for use on Tomcat

Sorry I was wrong (it's been a while ...). You don't really need to import the pkcs12 format certificate into a keystore, the .pfx you generated earlier *is* the keystore in pkcs12 format. Now you only need to configure tomcat to recognize the keystore. See

Re: Passing init parameters to event listener

and anything after it. Yoav Shapira Millennium Research Informatics -Original Message- From: Dennis Dai [mailto:[EMAIL PROTECTED] Sent: Friday, May 07, 2004 4:13 AM To: Tomcat Users List Subject: Passing init parameters to event listener Hi all, I'd like to pass init parameters to event

Passing init parameters to event listener

Hi all, I'd like to pass init parameters to event listener (in my case, it's session listener) instead of hard coding those parameters. But event listeners do not support init parameters like filters do. I know that I can get SetvletContext from events (thus getting the ServletContext

Re: Is it Tomcat problem or my problem?

Uma, How did you manage the session? Are you using container managed security? From your description, it seems that you manage sessions yourself. If that's the case, make sure you create a new session at login and invalidate session at logout ... Dennis On 4/22/2004 7:16 AM, [EMAIL

Re: Is it Tomcat problem or my problem?

On 4/24/2004 12:02 AM, [EMAIL PROTECTED] wrote: What if the client has disabled cookies? You'll need to use response.encodeURL(someURL) to rewrite the URL, so that JSESSIONID is appended with each link. Dennis - To