Re: Tomcat and SSL

2005-07-20 Thread Peddireddy Srikanth
i dont think https and http requests from the same machine will be having any impact on the session created already. I mean even if u call request.getSession(true) in a secure page and if a valid session already exists , nothinng like creating a new session and invalidating it will happen. There

RE: Tomcat For SSL

2005-05-23 Thread Trung Nguyen
Tomcat handles SSL certificates as it is, but I'd recommend install Apache to handle all cert instead of Tomcat. -Original Message- From: Scott Purcell [mailto:[EMAIL PROTECTED] Sent: Monday, May 23, 2005 9:39 AM To: tomcat-user@jakarta.apache.org Subject: Tomcat For SSL Hello, I

RE: Tomcat For SSL

2005-05-23 Thread Steve Kirk
Get ready for differing opinions on this, it's been asked loads of times before, try searching the archives for more info. My very quick summary would be that you do not need apache httpd to do SSL, and it can be very fast and stable without apache, as well as simpler to config if you don't

Re: Tomcat For SSL

2005-05-23 Thread Mark Thomas
Scott Purcell wrote: Should I wrap my site around Apache now. Meaning should I install apache and put tomcat inside? There is no standard answer to this question. It depends what you are trying to achieve. Apache adds both functionality and configuration complexity. You have to weigh the costs

RE: Tomcat and SSL

2005-04-19 Thread Raghupathy,Gurumoorthy
How did you create the certificate ? And with what details ? -Original Message- From: Marcos Ferreira [mailto:[EMAIL PROTECTED] Sent: 19 April 2005 13:39 To: tomcat-user@jakarta.apache.org Subject: Tomcat and SSL Hi, I'm having problems using Tomcat with SSL Protocol. I setup Client

Re: Tomcat and SSL

2005-04-19 Thread Parsons Technical Services
http://jakarta.apache.org/tomcat/tomcat-5.0-doc/config/http.html Set enableLookups to false. Doug - Original Message - From: Marcos Ferreira [EMAIL PROTECTED] To: tomcat-user@jakarta.apache.org Sent: Tuesday, April 19, 2005 8:39 AM Subject: Tomcat and SSL Hi, I'm having problems using

Re: Tomcat and SSL

2005-04-19 Thread Marcos Ferreira
: Tomcat and SSL How did you create the certificate ? And with what details ? -Original Message- From: Marcos Ferreira [mailto:[EMAIL PROTECTED] Sent: 19 April 2005 13:39 To: tomcat-user@jakarta.apache.org Subject: Tomcat and SSL Hi, I'm having problems using Tomcat with SSL Protocol

Re: Tomcat/4.1.31 - SSL Troubles

2005-04-13 Thread Jason Bainbridge
On 4/13/05, Andrey [EMAIL PROTECTED] wrote: Hello, (j2re1.4.1_02 is installed) I've created certificate keystore as described: http://jakarta.apache.org/tomcat/tomcat-4.1-doc/printer/ssl-howto.html then i uncommented Connector element for an SSL connector i server.xml. I can connect

Re: Tomcat/4.1.31 - SSL Troubles

2005-04-13 Thread Ben Kim
I can connect to ssl port ... and i can see sertificate.. but when i accept this sertificate my browser says The page cannot be displayed. Is the page OK on http then? - https://server.com:8443/app1/page1.jsp - http://server.com:8080/app1/page1.jsp Regards, Ben Kim Database Developer/Systems

Re: Tomcat 5 / SSL / Digsigtrust Certificate...

2005-03-07 Thread John Urban
I figured it out. I was importing the new signed cert to a new alias in my keystore, rather than the original key I generated when I created the keystore. And, Netscape's CA Chain certs work with JBoss/Tomcat5. John Urban wrote: I have sent my CSR and been approved and received my SSL Web server

Re: Tomcat 5 / SSL / Digsigtrust Certificate...

2005-03-05 Thread John Urban
I have sent my CSR and been approved and received my SSL Web server certificate from Digsigtrust. I have having problems getting the SSL certificate to install properly. I have tried every conceivable combinations to getting my browser to NOT pop up the Security Alart dialog. Most

Re: Tomcat and SSL

2005-02-27 Thread Jason Bainbridge
On Sun, 27 Feb 2005 16:22:52 -0800 (PST), deepak suldhal [EMAIL PROTECTED] wrote: Hi I followed the document http://jakarta.apache.org/tomcat/tomcat-5.0-doc/ssl-howto.html and reached to a point where I created .keystore file. * This .keystore is now located at C:\Documents and

Re: Tomcat and SSL : Want Client Authentication but not Server Authentication

2004-12-25 Thread Mark Anderson
I've never heard of being able to connect using SSL without a server certificate. But you don't have to spend money to get one: just use a self-signed certificate. Onkar Singh wrote: Hi , I want Client ( Web Browser) to be authenticated and not the Server ( Web Server).

RE: Tomcat - 4.1 - SSL redirect only works on ports 80 and 443

2004-11-11 Thread khanaz
Dave- Please post the non-ssl and ssl connector fields from your server.xml file Azam Khan -Original Message- From: David Austin [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 10, 2004 9:53 AM To: [EMAIL PROTECTED] Subject: Tomcat - 4.1 - SSL redirect only works on ports 80 and 443

RE: Tomcat - 4.1 - SSL redirect only works on ports 8

2004-11-11 Thread David Austin
Ok, here are my connector tags: !-- Define a non-SSL Coyote HTTP/1.1 Connector on port 8080 -- Connector className=org.apache.coyote.tomcat4.CoyoteConnector port=8080 minProcessors=5 maxProcessors=75 enableLookups=true redirectPort=8443

RE: Tomcat smtp SSL transport?

2004-10-15 Thread Shapira, Yoav
Hi, Tomcat only ships with the basic JavaMail provider, which IIRC doesn't have S/MIME support. You have to get a 3rd party library, such as CryptoMail (a SourceForge project IIRC), and use it. You might need to write a trivial CryptoMailSessionFactory to use as the Bean factory for Tomcat's

RE: Tomcat smtp SSL transport?

2004-10-15 Thread Evgeny Gesin
Hi Yoav. Tomcat and QMail are installed on same host. Currently clients (Mozilla-mail, KMail, ect) send email using SSL encryption. I need also send e-mails from Tomcat. Can I configure Tomcat server.xml or QMail or smtp relay (/etc/tcp.smtp) or ? to send e-mail via TCP and not SSL? Thanks!

RE: Tomcat smtp SSL transport?

2004-10-15 Thread Shapira, Yoav
://www.yoavshapira.com -Original Message- From: Evgeny Gesin [mailto:[EMAIL PROTECTED] Sent: Friday, October 15, 2004 9:46 AM To: Tomcat Users List Subject: RE: Tomcat smtp SSL transport? Hi Yoav. Tomcat and QMail are installed on same host. Currently clients (Mozilla-mail, KMail, ect) send

RE: Tomcat smtp SSL transport?

2004-10-15 Thread Evgeny Gesin
mail Session objects or anything like that. Yoav Shapira http://www.yoavshapira.com -Original Message- From: Evgeny Gesin [mailto:[EMAIL PROTECTED] Sent: Friday, October 15, 2004 9:46 AM To: Tomcat Users List Subject: RE: Tomcat smtp SSL transport? Hi Yoav. Tomcat and QMail

Re: Tomcat 5 SSL problem

2004-08-27 Thread Daniel Snchez Gmez
Hola Frank, I'm doing it too. My server.xml configuration is: Connector className=org.apache.coyote.tomcat5.CoyoteConnector port=8443 minProcessors=5 maxProcessors=75 enableLookups=true disableUploadTimeout=true acceptCount=100 debug=0 scheme=https

Re: Tomcat 4.1.30 + SSL = Problems

2004-07-08 Thread Dennis Dai
On 7/8/2004 3:46 PM, Fredrik Liden wrote: I followed the instructions on the tomcat SSL Config page. I generated the .keystore file using changeit password. When I go to the test page http://localhost:8443/ I see 5 squares up in the left corner and that's it. Anyone encountered this?? I'm not

Re: Tomcat 4.1.30 + SSL = Problems

2004-07-08 Thread Jason
=== Thu, Jul 08, 2004 at 05:35:05PM -0700 / Dennis Dai === I followed the instructions on the tomcat SSL Config page. I generated the .keystore file using changeit password. When I go to the test page http://localhost:8443/ I see 5 squares up in the left corner and that's it. Anyone

Re: Tomcat 4.1.30 + SSL = Problems

2004-07-08 Thread QM
: Use https://... instead of http://... : : Wow, if only I'd held off a few more minutes on my mail; thanks, this : was my problem as well. Is there a reason there's not a more legible : error? The server expects to complete an SSL-enabled handshake before your HTTP-level request makes it to

Re: Tomcat 4.1.30 + SSL = Problems

2004-07-08 Thread Dennis Dai
On 7/8/2004 7:39 PM, QM wrote: : Use https://... instead of http://... : : Wow, if only I'd held off a few more minutes on my mail; thanks, this : was my problem as well. Is there a reason there's not a more legible : error? The server expects to complete an SSL-enabled handshake before your

Re: Tomcat with ssl

2004-07-05 Thread Thilo Krawietz
Hello, in the official tomcat docu there is a good chapter about how to configure Tomcat with ssl. http://jakarta.apache.org/tomcat/tomcat-5.0-doc/ssl-howto.html Check it out! Regards, Thilo Hi, I search a good description to configure tomcat with ssl on port 443 and redirect from port 80. Has

RE: Tomcat + Apache + SSL

2004-07-01 Thread Lee, Paul NYC
http://jakarta.apache.org/tomcat/connectors-doc/jk2/index.html -Original Message- From: Lorenzo A. Jimenez Briceno [mailto:[EMAIL PROTECTED] Sent: Thursday, July 01, 2004 1:13 PM To: Tomcat Users List Subject: Tomcat + Apache + SSL Importance: High Hi, Where can I find info about

RE: Tomcat + Apache + SSL

2004-07-01 Thread Lorenzo A. Jimenez Briceno
Thanks. -Mensaje original- De: Lee, Paul NYC [mailto:[EMAIL PROTECTED] Enviado el: Jueves, 01 de Julio de 2004 11:30 a.m. Para: 'Tomcat Users List' Asunto: RE: Tomcat + Apache + SSL http://jakarta.apache.org/tomcat/connectors-doc/jk2/index.html -Original Message- From: Lorenzo

RE: Tomcat + Apache + SSL

2004-07-01 Thread Casas, Claudia
:[EMAIL PROTECTED] Sent: Thursday, July 01, 2004 2:41 PM To: Tomcat Users List Subject: RE: Tomcat + Apache + SSL Importance: High Thanks. -Mensaje original- De: Lee, Paul NYC [mailto:[EMAIL PROTECTED] Enviado el: Jueves, 01 de Julio de 2004 11:30 a.m. Para: 'Tomcat Users List' Asunto

RE: Tomcat + Apache + SSL

2004-07-01 Thread Lorenzo A. Jimenez Briceno
Thanks Claudia, Do you know about TC5 and A2 -Mensaje original- De: Casas, Claudia [mailto:[EMAIL PROTECTED] Enviado el: Jueves, 01 de Julio de 2004 02:48 p.m. Para: Tomcat Users List Asunto: RE: Tomcat + Apache + SSL I followed John Turner's Web page: http://johnturner.com/howto

RE: Tomcat + Apache + SSL

2004-07-01 Thread Casas, Claudia
: Lorenzo A. Jimenez Briceno [mailto:[EMAIL PROTECTED] Sent: Thursday, July 01, 2004 3:46 PM To: Tomcat Users List Subject: RE: Tomcat + Apache + SSL Importance: High Thanks Claudia, Do you know about TC5 and A2 -Mensaje original- De: Casas, Claudia [mailto:[EMAIL PROTECTED] Enviado el: Jueves

Re: Tomcat with SSL

2004-04-22 Thread Bill Barker
I believe that you can't use IBM's JSSE with the HttpConnector. You have to use the CoyoteConnector. Hiemer, Bernhard [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi Tomcat-Users, I found out, that my problem depends on the configuration of the security providers in the

Re: Tomcat with SSL

2004-04-22 Thread Hiemer, Bernhard
keystorePass=changeit / /Connector But there are the same effects ... -Ursprüngliche Nachricht- Von: Bill Barker [mailto:[EMAIL PROTECTED] Gesendet: Donnerstag, 22. April 2004 08:38 An: [EMAIL PROTECTED] Betreff: Re: Tomcat with SSL I believe that you can't use IBM's JSSE

Re: Tomcat with SSL

2004-04-22 Thread Jason Palmatier
... -Ursprüngliche Nachricht- Von: Bill Barker [mailto:[EMAIL PROTECTED] Gesendet: Donnerstag, 22. April 2004 08:38 An: [EMAIL PROTECTED] Betreff: Re: Tomcat with SSL I believe that you can't use IBM's JSSE with the HttpConnector. You have to use the CoyoteConnector

Re: Tomcat with SSL

2004-04-21 Thread Hiemer, Bernhard
Hi Tomcat-Users, I found out, that my problem depends on the configuration of the security providers in the java.security file. (On my machine is installed jsse from IBM and Sun). If the configuration is security.provider.1=sun.security.provider.Sun security.provider.2=com.ibm.jsse.JSSEProvider

Re: Tomcat and SSL: problem with expiration of VeriSign Global Server ID Intermediate Root

2004-04-07 Thread Jörn Böckenkamp
Hi again, Now that the VeriSign Global Server ID Intermediate Root cert has expired I have to replace the Intermediate Root cert on the server. There is an example on how to replace the cert on an apache server on their website (and that works fine), but no instructions how to replace it on

Re: Tomcat and SSL: problem with expiration of VeriSign Global Server ID Intermediate Root

2004-03-01 Thread Ankur Shah
Jörn Böckenkamp wrote: It IS easy when you're using a self-signed cert, but I have to use one from VeriSign and I don't think that I can regenerate the VeriSign cert with a new date :-) Did you try importing the new certificate directly into the user's keystore? For example, if you run the

Re: Tomcat and SSL: problem with expiration of VeriSign Global Server ID Intermediate Root

2004-02-27 Thread Jörn Böckenkamp
Hi Yan, Now that the VeriSign Global Server ID Intermediate Root cert has expired I have to replace the Intermediate Root cert on the server. There is an example on how to replace the cert on an apache server on their website (and that works fine), but no instructions how to replace it

RE: Tomcat and SSL: problem with expiration of VeriSign Global Server ID Intermediate Root

2004-02-27 Thread Yansheng Lin
happens if you do that? -Yan -Original Message- From: Jörn Böckenkamp [mailto:[EMAIL PROTECTED] Sent: Friday, February 27, 2004 5:41 AM To: Tomcat Users List Subject: Re: Tomcat and SSL: problem with expiration of VeriSign Global Server ID Intermediate Root Hi Yan, Now that the VeriSign

RE: Tomcat and SSL: problem with expiration of VeriSign Global Server ID Intermediate Root

2004-02-26 Thread Yansheng Lin
Hi, what i did for my local machine(TOMCAT-STANDALONE) was regenerate the certificate with a new date and everything worked fine. it's supposed to be easy. i forgot what i did with the params actually. well, i don't have to worry about it for another 10 years on my local machine now:). -yan

Re: Tomcat und SSL

2004-01-26 Thread Ankur Shah
Unless you've resolved the issue recently, both URIs come up fine for me. Tested on Mozilla 1.6b and IE 6.0 Lars Schreiber wrote: Hi thanks for help and for confidene to my english knowledge :-) in order that you understand my problem.. i have prepared a link for you

Re: Tomcat und SSL

2004-01-25 Thread Adam Hardy
[EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Saturday, January 24, 2004 5:07 PM Subject: Re: Tomcat und SSL Hi Lars, just try it - there's often /really/ bad English on the list, and people still understand. As long as you keep it simple! Anyway, what you want to do is just connect

Re: Tomcat with SSL

2004-01-24 Thread Ralf Schneider
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Freitag, 23. Januar 2004 18:49 schrieb Ralf Schneider: Hi, I want to try out SSL connections with Tomcat 5.0.16. I followed the instructions in the docs and generated a certificate with keytool which is stored under /root/.keystore and

Re: Tomcat und SSL

2004-01-24 Thread Adam Hardy
Hi Lars, just try it - there's often /really/ bad English on the list, and people still understand. As long as you keep it simple! Anyway, what you want to do is just connect via HTTPS, correct? And you say, your browser gives the message choose a certificate? I don't understand why you see

Re: Tomcat und SSL

2004-01-24 Thread Lars Schreiber
a apache with ssl and a conector to tomcat with ssl ? Thanks - Original Message - From: Adam Hardy [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Saturday, January 24, 2004 5:07 PM Subject: Re: Tomcat und SSL Hi Lars, just try it - there's often /really/ bad English

RE: Tomcat / Apache / SSl

2004-01-13 Thread johncoyle
Software: Apache - 2.0.48 Tomcat - 4.1.29 OpenSSL - 0.9.6l [engine] 04 Nov 2003 Hi, I am trying to encrypt all data being transmitted from the client pc to the webserver, and also from the webserver to tomcat. I have only been working on tomcat for a couple of months but have experience on

RE: Tomcat / Apache / SSl

2004-01-13 Thread Oscar Carrillo
You will use the same connector over port 8009. No additional connector needed over any other port. In your ssl.conf for apache, you will create a VirtualHost entry very much like the one that's in your httpd.conf file. In there you will do your JkMount declaratives, etc. BTW, I use 0.9.7c

Re: Tomcat 5 SSL Configuration

2004-01-12 Thread martin grotzke
On Mon, 2004-01-12 at 21:39, Brian Boyle wrote: Hi! Can someone please tell me how to configure SSL for tomcat 5. There seems to be difference in the server.xml file from previous versions of tomcat so I am unsure of what to edit or add to it. i have this in my server.xml: Connector

RE: Tomcat 5 SSL Configuration

2004-01-12 Thread Bruno.Melloni
I found very good instructions in both the Documentation section of the Tomcat site, and in the server.xml file itself. Look there. Make sure you use JDK 1.4.2_03 or higher (problem with expired CA certificate in previous versions). -Original Message- From: ext Brian Boyle

Re: Tomcat and SSL

2003-12-09 Thread Bill Barker
Usually this means that you don't have your JkMount statements in your SSL VirtualHost (as well as the normal VirtualHost). Jeremy Whitlock [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Tomcat List, I currently have the following setup: Apache 2.0.48 + SSL (OpenSSL

Re: Tomcat 4 + ssl + client authentication

2003-10-10 Thread Kenneth Westelinck
Client cert verification is done against the TrustStore, not the KeyStore. Tomcat 5 has some improvements for this. Tomcat 4 is still a bit limited. I have no idea what is goin wrong. Can someone tell me how to make this work? Assuming that you don't want to just import the signing cert into

Re: Tomcat 4 + ssl + client authentication

2003-10-09 Thread Bill Barker
Kenneth Westelinck [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi all, I've been searching the internet for 2 days now and still haven't found a solution for my problem. I am trying to set up a Tomcat 4 server running in HTTPS mode, contacted by a client written in Java. The

Re: Tomcat 3.3, SSL and short handshake

2003-10-01 Thread Bill Barker
Yuriy Stul [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello, I have Tomcat 3.3 with activated SSL. Everything works fine (HTTP, HTTPS). A problem is: when user connects with server via Microsoft Internet Explorer then Tomcat throws exception (SSL socket, socket was closed)

Re: Tomcat + Apache + SSL

2003-09-23 Thread Sean Bruton
You can use mod_rewrite in Apache. It's been a while but I believe something such as this in your httpd.conf should do the trick: RewriteEngine On RewriteRule ^/securecontext(.*) https://servername/securecontext$1 [R] I may be off a bit, so check the docs at:

RE: Tomcat + Apache + SSL

2003-09-23 Thread Robert D. Abernethy IV
Message- From: Sean Bruton [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 23, 2003 2:07 PM To: Tomcat Users List Subject: Re: Tomcat + Apache + SSL You can use mod_rewrite in Apache. It's been a while but I believe something such as this in your httpd.conf should do the trick: RewriteEngine

Re: Tomcat + Apache + SSL

2003-09-23 Thread Bill Barker
Where is Tim when you need him ;-). http://jakarta.apache.org/tomcat/faq/security.html#https Robert D. Abernethy IV [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I have apache set up to redirect requests for a specific context to Tomcat. I am curious if there is a way to force all

Re: tomcat apache SSL

2003-09-02 Thread Bill Barker
My first guess is that you are running a version 4.1.27. If so, you should see all sorts of errors in your Tomcat logs telling you what didn't work. If you want to know why earlier version don't work, search the archives or bugzilla. Elif Akten [EMAIL PROTECTED] wrote in message news:[EMAIL

RE: Tomcat IBM SSL Provider

2003-08-03 Thread McClure, Timothy J(IndSys, GE Interlogix)
PROTECTED] Subject: Re: Tomcat IBM SSL Provider 4.1.26 is currently in it's evaluation period to determine what it's stability rating will be. The official release is likely to be the end of the week, or early next week. In the mean time, it is currently living at http://jakarta.apache.org/builds

Re: tomcat 4.1.24 ssl with ibm jdk 1.4

2003-07-24 Thread Bill Barker
With 4.1.26 you should be able to use IBM's 1.4 JVM with the jsse jar in server/lib. It will work without the jsee jar anywhere on the machine in 4.1.27. If you need it before then, you can grab the source files from the CVS and compile the fixed version yourself. Francois Lascelles [EMAIL

RE: Tomcat IBM SSL Provider

2003-07-22 Thread McClure, Timothy J(IndSys, GE Interlogix)
We are using what I thought was the lastest 4.1.24. I did not see an option for download 4.1.26 on the jakarta web page. Tim -Original Message- From: Bill Barker [mailto:[EMAIL PROTECTED] Sent: Monday, July 21, 2003 11:09 PM To: [EMAIL PROTECTED] Subject: Re: Tomcat IBM SSL Provider

Re: Tomcat IBM SSL Provider

2003-07-22 Thread Bill Barker
was the lastest 4.1.24. I did not see an option for download 4.1.26 on the jakarta web page. Tim -Original Message- From: Bill Barker [mailto:[EMAIL PROTECTED] Sent: Monday, July 21, 2003 11:09 PM To: [EMAIL PROTECTED] Subject: Re: Tomcat IBM SSL Provider It mostly works in 4.1.26 (you still need

Re: Tomcat IBM SSL Provider

2003-07-21 Thread Bill Barker
It mostly works in 4.1.26 (you still need the JSSE jar, but Tomcat won't use it). It should work completely in 4.1.27. If you are impatient, you can always grap the CVS code from jakarta-tomcat-connectors/util/java/org/apache/tomcat/util/net/jsse and compile it. To work with the IBM JVM, you

RE: tomcat 4.1.12 ssl connector stop responding

2003-02-04 Thread Mohamed Nasser
I know there was a bug with the coyote connector for tomcat 4.1.12 as I configured with apache. I upgraded to 4.1.18 and I have had no problems. -Original Message- From: ing.Marco Baiguera [mailto:[EMAIL PROTECTED]] Sent: Tue, February 04, 2003 5:09 AM To: [EMAIL PROTECTED] Subject:

Re: Tomcat 4 - SSL - Client Authentication

2003-01-20 Thread Christopher Mark Balz
Have you checked the permissions to the directory where your keystore is held? The process running the webserver must of course be able to read the keystore. - CB Shiva.Devaguptapu wrote: Hi, I am using Tomcat 4 on a linux system. I am trying to enable SSL with client authentication enabled.

RE: Tomcat 4 - SSL - Client Authentication

2003-01-20 Thread Shiva.Devaguptapu
Yes. Read and write as well. -Original Message- From: Christopher Mark Balz [mailto:[EMAIL PROTECTED]] Sent: Monday, January 20, 2003 2:58 PM To: Tomcat Users List Subject: Re: Tomcat 4 - SSL - Client Authentication Have you checked the permissions to the directory where your keystore

Re: Tomcat standalone + SSL.

2002-12-06 Thread Alexander Wallace
I think i've been schooled in this already, so please disregard this unless still want to comment on it... Thanks again and sorry for this post, but it was made one minute before I was kindly informed by Milt Epstein that there is no way of doing what i ask here... On Fri, 2002-12-06 at 16:48,

RE: Tomcat and SSL

2002-12-02 Thread Jay Wright
So I have added: auth-constraint role-name*/role-name /auth-constraint to the web.xml file's security constraint tags. But still I get nothing. As I watch the logs below: 2002-12-02 16:18:33 Authenticator[/a/b/c]: Security checking request GET /a/b/c/index.jsp

RE: Tomcat and SSL

2002-12-02 Thread Craig R. McClanahan
On Mon, 2 Dec 2002, Jay Wright wrote: Date: Mon, 2 Dec 2002 16:32:56 -0800 From: Jay Wright [EMAIL PROTECTED] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: 'Tomcat Users List' [EMAIL PROTECTED] Subject: RE: Tomcat and SSL So I have added: auth-constraint role

RE: Tomcat and SSL

2002-12-02 Thread Jay Wright
-Original Message- From: Craig R. McClanahan [mailto:[EMAIL PROTECTED]] Sent: Monday, December 02, 2002 5:24 PM To: Tomcat Users List Subject: RE: Tomcat and SSL On Mon, 2 Dec 2002, Jay Wright wrote: Date: Mon, 2 Dec 2002 16:32:56 -0800 From: Jay Wright [EMAIL PROTECTED

RE: Tomcat and SSL

2002-12-02 Thread Craig R. McClanahan
On Mon, 2 Dec 2002, Jay Wright wrote: Paths specified in url-pattern elements are *always* relative to the context path. If you really want every URL in your webapp to be protected, use a URL pattern of /* instead of /a/b/c/*. Thanks for clarifying, it's beginning to make sense now.

RE: Tomcat and SSL

2002-12-02 Thread Jay Wright
2 questions below: -Original Message- From: Craig R. McClanahan [mailto:[EMAIL PROTECTED]] Sent: Monday, December 02, 2002 5:43 PM To: Tomcat Users List Subject: RE: Tomcat and SSL On Mon, 2 Dec 2002, Jay Wright wrote: Paths specified in url-pattern elements

RE: Tomcat and SSL

2002-12-02 Thread Craig R. McClanahan
On Mon, 2 Dec 2002, Jay Wright wrote: Date: Mon, 2 Dec 2002 17:52:14 -0800 From: Jay Wright [EMAIL PROTECTED] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: 'Tomcat Users List' [EMAIL PROTECTED] Subject: RE: Tomcat and SSL 2 questions below: -Original Message- From

RE: Tomcat-Apache SSL

2002-11-07 Thread Turner, John
Nope. The communication between Apache and Tomcat happens on a connector, like JK or JK2. The default JK port is 8009. The communication between Apache and Tomcat via JK or JK2 is not encrypted. John -Original Message- From: Richard Johnstone

Re: Tomcat-Apache SSL

2002-11-07 Thread Milt Epstein
On Thu, 7 Nov 2002, Richard Johnstone wrote: After reading the installing SSL doc for tomcat it says you don't need it on Tomcat, just have it on apache and you are ok. I have an apache SSL port (443) and this is working ok. I have my tomcat application on 8080, also works ok. What I don't

Re: Tomcat-Apache SSL - Extension Question

2002-11-07 Thread Chris Parker
[reply] You need to understand the difference between running Tomcat standalone and integrated with a web server (such as Apache). .. [snip] [/reply] Knowing all this, is there a way for a servlet to reliably know whether Apache is currently replying to http or https? The Apache connector

RE: Tomcat-Apache SSL - Extension Question

2002-11-07 Thread Turner, John
://marc.theaimsgroup.com/?l=tomcat-userm=103608496529118w=2 John -Original Message- From: Chris Parker [mailto:cparker;cya.ca.gov] Sent: Thursday, November 07, 2002 12:21 PM To: Tomcat Users List Subject: Re: Tomcat-Apache SSL - Extension Question [reply] You need to understand the difference

Re: Tomcat-Apache SSL - Extension Question

2002-11-07 Thread Chris Parker
This came up a week or so ago. Check here for a very comprehensive reply from Milt Epstein. In short, isSecure is exactly the method you should use, and it does know if the original request is SSL or not. If it is always returning 'false', something else is going on.

Re: Tomcat-Apache SSL - Extension Question

2002-11-07 Thread Milt Epstein
On Thu, 7 Nov 2002, Chris Parker wrote: This came up a week or so ago. Check here for a very comprehensive reply from Milt Epstein. In short, isSecure is exactly the method you should use, and it does know if the original request is SSL or not. If it is always returning 'false',

Re: Tomcat-Apache SSL - Extension Question

2002-11-07 Thread Chris Parker
Just a couple of things to add: 1. I suspect, but don't know for sure, that isSecure() (and getScheme()) should work correctly even with forwards/redirects as well. Of course, if you found that isSecure() doesn't work with basic https, as apparently is the case above, the problem

Re: Tomcat with SSL and Client certificate

2002-10-18 Thread Mehmet Birgi
] To: [EMAIL PROTECTED] Sent: Thursday, October 17, 2002 9:40 AM Subject: Re: Tomcat with SSL and Client certificate Start Tomcat with the additional option -Djavax.net.debug=all and watch the console. Although you will get a lot of output, it might help you in identifying the problem. Good luck

Re: Tomcat with SSL and Client certificate

2002-10-17 Thread Wolfgang Stein
Start Tomcat with the additional option -Djavax.net.debug=all and watch the console. Although you will get a lot of output, it might help you in identifying the problem. Good luck, Wolfgang Stein -Original Message- From: Frédéric LE MAISTRE [mailto:[EMAIL PROTECTED]] Sent:

Re: Tomcat with SSL and Client certificate

2002-10-17 Thread Frédéric LE MAISTRE
are you sure of the syntax? Because startup -Djavax.net.debug=all didn't do anything - Original Message - From: Wolfgang Stein [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 17, 2002 9:40 AM Subject: Re: Tomcat with SSL and Client certificate Start Tomcat

Re: Tomcat with SSL and Client certificate

2002-10-17 Thread Wolfgang Stein
with SSL and Client certificate are you sure of the syntax? Because startup -Djavax.net.debug=all didn't do anything - Original Message - From: Wolfgang Stein [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 17, 2002 9:40 AM Subject: Re: Tomcat with SSL

Re: Tomcat/IIS SSL

2002-10-08 Thread Fawaz Ahmad
Hello, I don't have any experience using SSL, but I have been reading up on it on the web. On the Apache website for Tomcat, it says that if you are using tomcat with another server (I'm using IIS) you should implement SSL in IIS rather than tomcat. I went on the Microsoft site to read up on

Re: Tomcat-Apache-SSL problem

2002-10-04 Thread David Mossakowski
Assuming you're using VirtualHost, do you specify the right JkMount paths in VirtualHost sections in your Apache that serve the secure port? d. haixi liu wrote: Hello, I am having a problem accessing my webapps using https protocol. My server conf is: Tomcat 4.0.5 + Apache 1.3.26 +

Re: Tomcat-Apache-SSL problem

2002-10-04 Thread haixi liu
David, No, I did not. I am using the auto config file generated by Tomcat from $CATALINA_HOME/conf/jk/workers.properties. In my http.conf, I just have this line: Include /usr/local/tomcat/conf/auto/mod_jk.conf I think that's the reason why the http works but https doesn't work. I looked at

Re: Tomcat-Apache-SSL problem

2002-10-04 Thread haixi liu
Got it to work. Thanks From: haixi liu [EMAIL PROTECTED] Reply-To: Tomcat Users List [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: Tomcat-Apache-SSL problem Date: Fri, 04 Oct 2002 17:25:20 + David, No, I did not. I am using the auto config file generated by Tomcat from

Re: Tomcat 4.1.12: SSL warnings in catalina.out

2002-10-01 Thread Francisco Queiros Pinto
William Lee wrote: I've set up a standalone 4.1.12 Tomcat instance using SSL connection. When I looked into the catalina.out in the log directory, I realized that there are some warning lines in there that are pretty annoying. The lines are like: [WARN] Http11Processor - -Exception

RE: Tomcat 4.0 - SSL DOES NOT WORK!

2002-09-25 Thread Turner, John
Or post a HOWTO for the archives. John -Original Message- From: micael [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 25, 2002 1:37 AM To: Tomcat Users List Subject: RE: Tomcat 4.0 - SSL DOES NOT WORK! Now, to pay back everyone for all that help, you should answer

RE: Tomcat 4.0 - SSL DOES NOT WORK!

2002-09-25 Thread neal
Sure, Anyone who want to see my config file is welcome to. Just drop me an email. :) Neal -Original Message- From: micael [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 24, 2002 10:37 PM To: Tomcat Users List Subject: RE: Tomcat 4.0 - SSL DOES NOT WORK! Now, to pay back everyone

Re: Tomcat 4.0 - SSL DOES NOT WORK!

2002-09-24 Thread Martin Jacobson
neal wrote: Thanks but this is actually specific to tomcat 3. The configuration for Tomcat 4 is a bit different. :( Some good overall SSL info though. I'll pass this to the SysAdmin to see if this tips him off to anything. Thanks. Neal Hi Neal, I'm using 4.0.4b3 with SSL working

Re: Tomcat 4.0 - SSL DOES NOT WORK!

2002-09-24 Thread achana
:[EMAIL PROTECTED]] Sent: Monday, September 23, 2002 4:14 PM To: Tomcat Users List Cc: neal Subject: Re: Tomcat 4.0 - SSL DOES NOT WORK! Did you build it yourself, with the necessary libraries on the classpath? 4.0 doesn't support SSL out of the box; you have to compile

RE: Tomcat 4.0 - SSL DOES NOT WORK!

2002-09-24 Thread neal
Alright, For anyone out there considering using SSL with Tomcat4 Standalone, I just wanted to append this thread to let everyone know that ... it DOES work afterall! :) Thanks to Ian and Martin for convincing me it is possible. It turns out that our configuration was right all along and my

RE: Tomcat 4.0 - SSL DOES NOT WORK!

2002-09-24 Thread micael
Now, to pay back everyone for all that help, you should answer the next person that asks with all your coding. RIght? At 04:00 PM 9/24/2002 -0700, you wrote: Alright, For anyone out there considering using SSL with Tomcat4 Standalone, I just wanted to append this thread to let everyone know

Re: Tomcat 4.0 - SSL DOES NOT WORK!

2002-09-23 Thread Ian McFarland
Did you build it yourself, with the necessary libraries on the classpath? 4.0 doesn't support SSL out of the box; you have to compile it with the libraries on the classpath, and I forget what else. I've done it before, and it worked fine for me. Finding the docs on how to do it was the hard

Re: Tomcat 4.0 - SSL DOES NOT WORK!

2002-09-23 Thread micael
http://www.mnu.edu/tomcat/tomcat-ssl-howto.html At 04:00 PM 9/23/2002 -0700, you wrote: Alright, Two solid days of troubleshooting between myself, a system admin, and a technical guy from Thawte and we've following the directions explicitly and tweaked everything we can think to tweak. I think

RE: Tomcat 4.0 - SSL DOES NOT WORK!

2002-09-23 Thread neal
]] Sent: Monday, September 23, 2002 4:14 PM To: Tomcat Users List Cc: neal Subject: Re: Tomcat 4.0 - SSL DOES NOT WORK! Did you build it yourself, with the necessary libraries on the classpath? 4.0 doesn't support SSL out of the box; you have to compile it with the libraries on the classpath, and I

RE: Tomcat 4.0 - SSL DOES NOT WORK!

2002-09-23 Thread neal
-Original Message- From: Ian McFarland [mailto:[EMAIL PROTECTED]] Sent: Monday, September 23, 2002 4:14 PM To: Tomcat Users List Cc: neal Subject: Re: Tomcat 4.0 - SSL DOES NOT WORK! Did you build it yourself, with the necessary libraries on the classpath? 4.0 doesn't support SSL out of the box; you

RE: Tomcat 4.0 - SSL DOES NOT WORK!

2002-09-23 Thread neal
]] Sent: Monday, September 23, 2002 4:31 PM To: Tomcat Users List Subject: Re: Tomcat 4.0 - SSL DOES NOT WORK! http://www.mnu.edu/tomcat/tomcat-ssl-howto.html At 04:00 PM 9/23/2002 -0700, you wrote: Alright, Two solid days of troubleshooting between myself, a system admin, and a technical guy from

RE: Tomcat 4.0 - SSL DOES NOT WORK!

2002-09-23 Thread Robert L Sowders
Look here for SSL how to for 4.1 http://jakarta.apache.org/tomcat/tomcat-4.1-doc/ssl-howto.html neal [EMAIL PROTECTED] 09/23/2002 06:30 PM Please respond to Tomcat Users List To: Tomcat Users List [EMAIL PROTECTED] cc: Subject:RE: Tomcat 4.0 - SSL DOES

Re: Tomcat 4.0 - SSL DOES NOT WORK!

2002-09-23 Thread Ian McFarland
- From: Ian McFarland [mailto:[EMAIL PROTECTED]] Sent: Monday, September 23, 2002 4:14 PM To: Tomcat Users List Cc: neal Subject: Re: Tomcat 4.0 - SSL DOES NOT WORK! Did you build it yourself, with the necessary libraries on the classpath? 4.0 doesn't support SSL out of the box; you have

  1   2   >