Using Apache/mod_ssl certificate and private key with Tomcat/keytool

Hi, I have an Apache+mod_ssl+Tomcat configuration that's been working fine for several years. I have an SSL certificate from Verisign, and my httpd.conf file contains: SSLCertificateFile /path/to/server.crt SSLCertificateKeyFile /path/to/server.key The private key is unencrypted so that the ser

Followup to Valve As Custom Authenticator

I just wanted to follow up on my earlier post, and thank Tim Funk and Bill Barker for leading me in the right direction. It turned out that my Valve code was in fact mostly correct; I was just installing it in the wrong place! I had it installed at the Engine level, where all sorts of weird thi

Re: Valve as Custom Authenticator

is being executed before the BasicAuthenticator valve? -Tim Scott Kelley wrote: SingleSignOn has much the same code as BasicAuthenticator: in org.apache.catalina.authenticator.SingleSignOn.java: // Look up the cached Principal associated with this cookie value if (debug &g

Re: Valve as Custom Authenticator

e: I don't have time to see whats wrong, but check the SingleSignOnValve as a reference to compare your code. -Tim Scott Kelley wrote: We've had an Apache/Tomcat configuration deployed for a couple years now. Authentication is handled by a custom Apache plugin written in C. Everything

Valve as Custom Authenticator

We've had an Apache/Tomcat configuration deployed for a couple years now. Authentication is handled by a custom Apache plugin written in C. Everything works great and has been quite reliable. Now we would like to move to a standalone Tomcat configuration and have been investigating writing a Va

Changing *Default* allowLinking Behavior

s curious, the configuration we use with all the symlinks is one of our development configurations; our deployment builds do not use symlinks at all, so the problem (and the security issue) doesn't come up. Any tips appreciated. Thanks, Scott Kelley P.S. No, we don't want to cha

Adding security constraints on a per-server basis

example? Thanks, Scott -- ------ Scott Kelley, [EMAIL PROTECTED] Biology Computing Services, UC San Diego --

Importing OpenSSL Private Key with keytool

tself? If it's not impossible, can somebody please explain to me how to do it? If it is impossible, is this a limitation of keytool, or the java.security API? Could I do it with a short piece of code? Thanks, Scott ------ Scott Kelley, [EMAIL PRO