RE: SSL mutual communication problem with Tomcat5 --- Remote host closed connection during handshake

2005-09-14 Thread Xia, Hong
as non CA root? -Original Message- From: Mark Thomas [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 14, 2005 1:51 PM To: Tomcat Users List Subject: Re: SSL mutual communication problem with Tomcat5 --- Remote host closed connection during handshake Xia, Hong wrote: > Hi, Mark, &g

Re: SSL mutual communication problem with Tomcat5 --- Remote host closed connection during handshake

2005-09-14 Thread Mark Thomas
Xia, Hong wrote: Hi, Mark, I have the both server and client .cer imported to cacerts but the problem persists commands to generate the server and client key: Keytool -genkey -alias server -keyalg RSA -keystore serverstore.jks Keytool -genkey -alias client -keyalg RSA -keystore clientstore.jks

RE: SSL mutual communication problem with Tomcat5 --- Remote host closed connection during handshake

2005-09-14 Thread Xia, Hong
sage- From: Mark Thomas [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 13, 2005 5:12 PM To: Tomcat Users List Subject: Re: SSL mutual communication problem with Tomcat5 --- Remote host closed connection during handshake Hector Adolfo Alonso wrote: > Hi Xia: >I think you cannot use

RE: SSL mutual communication problem with Tomcat5 --- Remote host closed connection during handshake

2005-09-14 Thread Xia, Hong
: SSL mutual communication problem with Tomcat5 --- Remote host closed connection during handshake Hector Adolfo Alonso wrote: > Hi Xia: >I think you cannot use an self-signed certificate (as keytool > generates) for mutual authentication. > User certificate's certificate autho

Re: SSL mutual communication problem with Tomcat5 --- Remote host closed connection during handshake

2005-09-13 Thread Mark Thomas
Hector Adolfo Alonso wrote: Hi Xia: I think you cannot use an self-signed certificate (as keytool generates) for mutual authentication. User certificate's certificate authority signer shoul be the same that signs the server certificate. In this case, the server certificate is self-signed. On

Re: SSL mutual communication problem with Tomcat5 --- Remote host closed connection during handshake

2005-09-13 Thread Hector Adolfo Alonso
Hi Xia: I think you cannot use an self-signed certificate (as keytool generates) for mutual authentication. User certificate's certificate authority signer shoul be the same that signs the server certificate. In this case, the server certificate is self-signed. On the othe hand, who signs the

Re: SSL mutual communication problem with Tomcat5 --- Remote host closed connection during handshake

2005-09-13 Thread Mark Thomas
Xia, Hong wrote: Thanks for your help Mark. When I imported the client cert, I pick the 'Automatically select the certificate store ...' option and the certificate appeared under the Trusted Root. I tried to place the certificate under Personal and Other People but the certificate did not app

RE: SSL mutual communication problem with Tomcat5 --- Remote host closed connection during handshake

2005-09-13 Thread Xia, Hong
after the import. -Original Message- From: Mark Thomas [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 13, 2005 2:56 PM To: Tomcat Users List Subject: Re: SSL mutual communication problem with Tomcat5 --- Remote host closed connection during handshake Xia, Hong wrote: > Hello, >

Re: SSL mutual communication problem with Tomcat5 --- Remote host closed connection during handshake

2005-09-13 Thread Mark Thomas
Xia, Hong wrote: Hello, I am trying to set up Tomcat5 ( as standalone web server ) with https mutal authentication. There is the connector config The keys and keystore were created using Keytool Client certificate client.cer was sent to the client machine which uses IE6 to connect the tomc

SSL mutual communication problem with Tomcat5 --- Remote host closed connection during handshake

2005-09-13 Thread Xia, Hong
Hello, I am trying to set up Tomcat5 ( as standalone web server ) with https mutal authentication. There is the connector config The keys and keystore were created using Keytool Client certificate client.cer was sent to the client machine which uses IE6 to connect the tomcat server. IE6 impo