mod_jk + ssl

2003-02-24 Thread Adam Greene
I am getting ready to setup a Linux box running Apache 1.3.29, Tomcat
4.1.18, and mod_jk and I am wondering if there is anything special I need to
do to my Tomcat config as the Apache HTTP is what will have the SSL running
on it (via mod_ssl).



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



UTF-8 vs ISO-8859-1 and really screwed up webpages.

2002-12-18 Thread Adam Greene
I have two webpages and both contain the letter é (litterally written into
the page), but one page displays it as é and the other page displays it as
é and I cannot figure out why.  I have tried setting (via META Tags) the
language to UTF-8 and to ISO-8859-1 and I can only get one page to work at a
time (under UTF-8, the é comes up as a block on the page that did work under
ISO-8859-1).  I can see no difference in the code.

Does anyone have any ideas about what is going on??



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Window doesnt close on shutdown

2002-10-18 Thread Adam Greene
Does the title bar say Finished??

-Original Message-
From: RXZ JLo [mailto:rufoo2001;yahoo.com]
Sent: Wednesday, October 16, 2002 9:33 AM
To: [EMAIL PROTECTED]
Subject: Window doesnt close on shutdown


I use tomcat4.0.4 on windows 2000.
When I shutdown tomcat, the window
just shows
Stopping Tomcat-Apache and standalone
and doesnt close on itself.

Does this mean my application hasnt
closed properly?

Thanks,
rf



__
Do you Yahoo!?
Faith Hill - Exclusive Performances, Videos  More
http://faith.yahoo.com

--
To unsubscribe, e-mail:
mailto:tomcat-user-unsubscribe;jakarta.apache.org
For additional commands, e-mail:
mailto:tomcat-user-help;jakarta.apache.org




--
To unsubscribe, e-mail:   mailto:tomcat-user-unsubscribe;jakarta.apache.org
For additional commands, e-mail: mailto:tomcat-user-help;jakarta.apache.org




RE: Tomcat 4.1.x STILL seems broken on Linux

2002-10-18 Thread Adam Greene
If you are using Torque or any other project that uses the commons-logging
library, there is a possibility that you have two different versions of that
library, they have slight different names, which I cannot remember.  Simply
delete the older ones.

-Original Message-
From: John Byrd [mailto:john.byrd;darkspell.com]
Sent: Wednesday, October 16, 2002 11:00 PM
To: [EMAIL PROTECTED]
Subject: Tomcat 4.1.x STILL seems broken on Linux


I'm embarrassed to report that I prematurely applauded one user's
suggestion as the fix to my problem w/ the attached exception on
starting up Tomcat 4.1.12 on Redhat 7.3. Unfortunately, I was in the
wrong shell window, and was starting Tomcat 4.0.6, which has always
worked flawlessly.

In examining the stack trace, I noticed that the error seems to occur in
 org.apache.commons.digester.Digester (once in its parse method at line
1495, and once in its startElement method at line 1240). It also appears
to me that this class is new in the 4.1.x's, which would explain why I'm
not getting the same error in 4.04 or 4.0.6.

Does this provide a clue to anyone? I've tried replacing the 4.1.12
server.xml and server/web.xml files w/ the ones from the 4.0.6 distro,
but this has not effect. I still get the same error.


--
John Byrd
[EMAIL PROTECTED]



--
To unsubscribe, e-mail:   mailto:tomcat-user-unsubscribe;jakarta.apache.org
For additional commands, e-mail: mailto:tomcat-user-help;jakarta.apache.org




RE: Can someone PLEASE tell me why tomcat uses so much CPU???

2002-10-01 Thread Adam Greene

I have to agree.  I have a website that we pounded with 3 test computers and
couldn't get Tomcat over 20% usage.

-Original Message-
From: Turner, John [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 01, 2002 9:19 AM
To: 'Tomcat Users List'
Subject: RE: Can someone PLEASE tell me why tomcat uses so much CPU???



I'm not sure it is Tomcat.

I have Tomcat 3.1 with Apache 1.3.26 and mod_jserv, many separate instances
of Tomcat.  My servers rarely go over 40% CPU, and my sites are not only
high-traffic but resource intensive (on-the-fly custom graphics
manipulation).  Uptime is 112 days.

I guess it could be a bug the showed up between Tomcat 3.1 and 3.2.4, but
more likely it is a combination of RH 7.1 (mine are 7.2), the connector
(which source of the connector are you using) and Tomcat.  The issue
could just as easily be in RH or the connector.

John


 -Original Message-
 From: Brandon Cruz [mailto:[EMAIL PROTECTED]]
 Sent: Monday, September 30, 2002 4:57 PM
 To: Tomcat Users List
 Subject: Can someone PLEASE tell me why tomcat uses so much CPU???


 Hi,

 I am using tomcat 3.2.4, mod_jk, apache 1.3.x, linux redhat
 7.1.  The java
 processes slowly take more and more CPU power.  After about a
 day, java is
 taking 15% CPU, after two days, about 30% of a 1GHZ CPU, etc.
  If I leave it
 running for more than three or four days, everything is VERY
 slow.  Does
 anyone know why this happens and if it is normal?

 I have not been able to find an answer to this anywhere!

 Brandon


 --
 To unsubscribe, e-mail:
 mailto:[EMAIL PROTECTED]
 For additional commands, e-mail:
 mailto:[EMAIL PROTECTED]


--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Cannot get Tomcat to do reloadable=true

2002-09-30 Thread Adam Greene

I have tried everything, but Tomcat (4.1.10) simply will reload any class
files that I change.  I have to stop and restart Tomcat inorder for changes
to be picked up.  I even copied a working config from another computer that
does work, and that still didn't fix it.  Does anyone have any ideas what
might be wrong??

Here is the code I tried using:

  Host className=org.apache.catalina.core.StandardHost
appBase=creditunions autoDeploy=true
configClass=org.apache.catalina.startup.ContextConfig
contextClass=org.apache.catalina.core.StandardContext debug=0
deployXML=true
errorReportValveClass=org.apache.catalina.valves.ErrorReportValve
liveDeploy=true mapperClass=org.apache.catalina.core.StandardHostMapper
name=adam unpackWARs=false
Context className=org.apache.catalina.core.StandardContext
cachingAllowed=true
charsetMapperClass=org.apache.catalina.util.CharsetMapper cookies=true
crossContext=false debug=0 displayName=Tapestry Tutorial
docBase=victory/brooklyn
mapperClass=org.apache.catalina.core.StandardContextMapper
path=/brooklyn privileged=false reloadable=true swallowOutput=false
useNaming=true wrapperClass=org.apache.catalina.core.StandardWrapper
/Context



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: How many people are using 4.1.12 successfully?

2002-09-27 Thread Adam Greene

Well, I've been noticing some irregularities in the way Tomcat 4.1.12
works.  First off, I had to change my Resource paths from
/com/whatever/file.ext to com/whatever/file.ext.  I have had it refuse
to recognize jar files placed in the common/lib directory.  and other minor
problems.  So I would suggest caution on deployment.

-Original Message-
From: Turner, John [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 27, 2002 12:50 PM
To: '[EMAIL PROTECTED]'
Subject: How many people are using 4.1.12 successfully?



Hello -

We're almost ready to deploy a new app.  We have been using 4.0.4 in
development.

I need to get an idea of how stable 4.1.12 is...based on the traffic in the
last week, 4.1.12 looks to be fairly unstable, regardless of its 'release'
designation.

Should we stick with 4.0.4, or take the plunge with 4.1.12?  We will be
using Apache with a connector in addition to Tomcat.

- John


John Turner
[EMAIL PROTECTED]
Advertising Audit Service
http://www.aas.com


--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Questions about [SECURITY] Apache Tomcat 4.x JSP source disclosure vulnerability

2002-09-26 Thread Adam Greene

Maybe I don't understand, but DefaultServlet, which is supposed to serve
static content is disabled... How are we supposed to serve up pictures, etc
that are static??



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Broken Class Loader in 4.1.12

2002-09-26 Thread Adam Greene

Here is the configuration:

Under C:\Tomcat4.1.12\common\classes is a central code set for several
different websites.  In the subdirectory /com/creditunion is a file called
Torque.properties
Under C:\Tomcat4.1.12\common\lib is the torque.jar file
Under
C:\Tomcat4.1.12\creditunions\creditunionX\WEB-INF\classes\com\creditunion\Cr
editUnionServlet.class
In CreditUnionServlet in the init() is the following line:

InputStream input =
getClass().getClassLoader().getResourceAsStream(/com/creditunion/Torque.pro
perties);

This worked fine under Tomcat 4.1.10, but is now broken under Tomcat 4.1.12.



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Discovered Problem with Broken Class Loader in 4.1.12

2002-09-26 Thread Adam Greene

Never Mind.  I simply removed the / from in front of com/creditunion and it
found it.  I'm not sure which way is the correct way, but none-the-less, it
works now.

-Original Message-
From: Adam Greene [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 26, 2002 11:00 AM
To: Tomcat Users List
Subject: Broken Class Loader in 4.1.12


Here is the configuration:

Under C:\Tomcat4.1.12\common\classes is a central code set for several
different websites.  In the subdirectory /com/creditunion is a file called
Torque.properties
Under C:\Tomcat4.1.12\common\lib is the torque.jar file
Under
C:\Tomcat4.1.12\creditunions\creditunionX\WEB-INF\classes\com\creditunion\Cr
editUnionServlet.class
In CreditUnionServlet in the init() is the following line:

InputStream input =
getClass().getClassLoader().getResourceAsStream(/com/creditunion/Torque.pro
perties);

This worked fine under Tomcat 4.1.10, but is now broken under Tomcat 4.1.12.



--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Trying to find a jk2 or equiv for Apache 1.3.* on Win32

2002-09-26 Thread Adam Greene

I do not have a C/C++ Compiler and would like help locating a compiled
version of the DLL and possibly any help setting up the scenario following
(I tried reading the help, but I'm still not sure).

What I have is :

Apache 4.1.12
Apache HTTP 1.3.26
JDK 1.4.0

Running on

Windows 2000 SP 3

What I want to do:

Our hosting partner is running Apache 1.3.26 and all our development has
been done on Tomcat, and they don't want to setup a seperate box for Tomcat.
So we need to integrate into HTTP such that any request starting with
www.somedomain.com is delegated to Tomcat because we will have things like
www.somedomain.com/location1, www.somedomain.com/location2 and location1
and location2 are actually servlets (they are Tapestry based).  Most of the
other sites on the box are PHP based, so we don't want to distrub them.

Any help rendered is greatly appreciated.  Thank you.



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Actually Class Loader in 4.1.12 is really broken (or else something like that)

2002-09-26 Thread Adam Greene

I just installed Tomcat 4.1.12 (fresh install in a new directory) and copied
all the necessary libraries into common/lib and copied a couple of projects
into it, setup the contexts, etc.  But when I try to run the project (which
worked in 4.0.4) it keeps complaining that it cannot find
(ClassNotFoundException) net.sf.tapestry.ApplicationServlet, which is
located in net.sf.tapestry-2.1.jar, which is one of the libraries copied
int common/lib.  Hence, the assumption that the class loader is toasted.

Config:

Win2K SP3
Tomcat 4.1.12
JDK 1.4.0



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Trying to find a jk2 or equiv for Apache 1.3.* on Win32

2002-09-26 Thread Adam Greene

Do you have actual compiled DLLs that I could have that match my
configuration??  I really need them and like I said, no access to C/C++
compiler.

-Original Message-
From: Turner, John
Sent: Thursday, September 26, 2002 1:42 PM
To: 'Tomcat Users List'
Subject: RE: Trying to find a jk2 or equiv for Apache 1.3.* on Win32



Not quite.

mod_jk2.dll is JK2.

mod_jk.dll is JK.

Conceivably, there can be Apache 1 and Apache 2 versions of both, for 4
total files.

John

 -Original Message-
 From: Nani Jon [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, September 26, 2002 12:41 PM
 To: Tomcat Users List; [EMAIL PROTECTED]
 Subject: Re: Trying to find a jk2 or equiv for Apache 1.3.* on Win32



 Adam:
 If I am not mistaken, mod_jk2.dll is for Apache 2. For
 versions lower than 2, you need to use mod_jk.dll for windows
 machines. Hope this helps.
 Cheers,
 Nanijon.
  Adam Greene wrote:I do not have a C/C++ Compiler and would
 like help locating a compiled
 version of the DLL and possibly any help setting up the
 scenario following
 (I tried reading the help, but I'm still not sure).

 What I have is :

 Apache 4.1.12
 Apache HTTP 1.3.26
 JDK 1.4.0

 Running on

 Windows 2000 SP 3

 What I want to do:

 Our hosting partner is running Apache 1.3.26 and all our
 development has
 been done on Tomcat, and they don't want to setup a seperate
 box for Tomcat.
 So we need to integrate into HTTP such that any request starting with
 www.somedomain.com is delegated to Tomcat because we will
 have things like
 www.somedomain.com/location1,
 www.somedomain.com/location2 and location1
 and location2 are actually servlets (they are Tapestry
 based). Most of the
 other sites on the box are PHP based, so we don't want to
 distrub them.

 Any help rendered is greatly appreciated. Thank you.



 --
 To unsubscribe, e-mail:
 For additional commands, e-mail:



 -
 Do you Yahoo!?
 New DSL Internet Access from SBC  Yahoo!


--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Locating Dynamically Generated Files...

2002-09-24 Thread Adam Greene

You could use the servlet context's getRealPath().  I'm not sure the exact
name of the class (I use Tapestry for all my web development and it accesses
it as getServletContext().getRealPath()).

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 24, 2002 12:26 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Locating Dynamically Generated Files...


My JSP uses a bean that creates a file dynamically.
Unfortunately, the file ends up in the jakarta-tomcat\bin directory rather
than
in my web app directory where the JSP tries to get it from.

How do I make dynamically generated files end up in my web app directory?
Anyone run across any sample code that does this?

Thanks...

Jerry


--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Tomcat 4.1.10 don't compile jsp under w2k

2002-09-20 Thread Adam Greene

Make sure that you have a copy of the tools.jar in the [TOMCAT]\common\lib,
where [TOMCAT] is your tomcat install directory.  (In the classpath might
work as well).  That is what solved it for me.

-Original Message-
From: Remy Maucherat [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 20, 2002 2:09 PM
To: Tomcat Users List
Subject: Re: Tomcat 4.1.10 don't compile jsp under w2k


Patricio Vera S. wrote:
 Hello,

 I'm trying to setup tomcat 4.1.x on my w2k, but I have problem when
call
 to jsp page, it seems like the path separator is not valid because in the
 log I have the next entry :

 2002-09-20 11:47:27 Error compiling file:
 C:\Tomcat4.1\work\Standalone\localhost\_\/index_jsp.java [javac]
 Compiling 1 source file
 [javac] Modern compiler not found - looking for classic compiler

 I seek in the bug database, and try with the 4.1.11 version but still
 have the problem any suggest??

No sorry, that error is Ant failing to find a Java compiler to use.

Remy


--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




JMX??

2002-09-13 Thread Adam Greene

I saw that Tomcat 4.1.X has JMX in it, is it possible to add our own MBeans
to Tomcat??  I am working on a work flow server and would like to implement
support services as MBeans.

Adam Greene
ROMulin Group Inc

885 Main St, Suite 16
Moncton, NB
E1C 1G5

Ph: (506) 863-1014 x4
Fx: (506) 854-6886

http://www.romulin.com/





--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: Tomcat and Crystal Reports (Urgent)

2002-08-29 Thread Adam Greene

Or look into Crystal Reports 9.0 that just came out and has support for Servlets, 
EJBs, 
etc.

 Maybe you could use the JavaViewerBean in a servlet instead of an applet -
 documentation or no - bytecode is easy to study.  Regardless - if you want a
 professional solution, I would look at http://www.inetsoftware.de/ as
 someone earlier suggested...
 
 Randy
 
 - Original Message -
 From: Amit Lonkar [EMAIL PROTECTED]
 To: Tomcat Users List [EMAIL PROTECTED]
 Sent: Wednesday, August 28, 2002 10:47 PM
 Subject: Re: Tomcat and Crystal Reports (Urgent)
 
 
  Hi
  They have included a JavaViewerBean, whichc show the
  report in an applet, but no documentation available on
  this.
 
  amit
   --- Randy Secrist [EMAIL PROTECTED] wrote: 
  The last version of Crystal reports I used was
   version 7.0.  I didn't think
   they had any java support at that time.  Has this
   changed?
  
   Randy
   - Original Message -
   From: Amit Lonkar [EMAIL PROTECTED]
   To: [EMAIL PROTECTED]
   Sent: Wednesday, August 28, 2002 9:32 PM
   Subject: Tomcat and Crystal Reports (Urgent)
  
  
Hi All!!
   
Has any one been able to deploy crystal reports on
Tomcat server. If yes, please let me know how you
   have
done it.
   
Thanks A Lot
Amit Lonkar
   
   
  
  
Want to sell your car? advertise on Yahoo Autos
   Classifieds. It's Free!!
   visit http://in.autos.yahoo.com
   
--
To unsubscribe, e-mail:
   mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
   mailto:[EMAIL PROTECTED]
   
  
  
   --
   To unsubscribe, e-mail:
   mailto:[EMAIL PROTECTED]
   For additional commands, e-mail:
   mailto:[EMAIL PROTECTED]
  
 
  
  Want to sell your car? advertise on Yahoo Autos Classifieds. It's Free!!
 visit http://in.autos.yahoo.com
 
  --
  To unsubscribe, e-mail:
 mailto:[EMAIL PROTECTED]
  For additional commands, e-mail:
 mailto:[EMAIL PROTECTED]
 
 
 
 --
 To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
 For additional commands, e-mail: mailto:[EMAIL PROTECTED]
 



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Tomcat 4 - OpenSSL - IE client certificate works partially

2002-07-02 Thread Adam Greene

I don't know if this applies to Apache Tomcat, but Apache Web Server does
not like IE certs.  There was an article in Eweek that talked about how
Apache follows the standard, and Microsoft (as usual) innovated in regards
to SSL, TLS, etc.  So that Internet Explorer does work quite right with
Apache Web Server.  This might be what you are seeing.  Verisign must have
broken their certs to work with both IIS and Apache.

Adam Greene
ROMulin Group Inc

885 Main St, Suite 16
Moncton, NB
E1C 1G5

Ph: (506) 863-1014 x4
Fx: (506) 854-6886

http://www.romulin.com/

-Original Message-
From: Henrik Schultz [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 01, 2002 11:43 AM
To: tomcat-user
Subject: Tomcat 4 - OpenSSL - IE client certificate works partially


Greetings all...

For those not interested in client certificates at the deep technical
level, this is probably not your favorite cup of tea. Otherwise read on.

Enabling SSL in Tomcat is really no sweat using your own home-made
certificates, thanks to the excellent  HOW-TO. Once you get your root CA
certificate installed in the right places, and a suitable certificate
installed in Tomcat, everything works just fine.

However, creating client certificates that works with IE has (at least for
me) shown to be a real pain. I've experimented for months, and tried
numerous postings on this list, but noone seemed to know the finer details.
It was only recently I had a breakthrough, in that a trial certificate from
Verisign allowed me to compare that and a home-made one, and find the bits
that makes the difference, that is, what it takes for it to be shown on the
selection list in IE when the server asks for a client certificate.
Last night I succeeded. The right combination of keytool and openssl
maneuvres to setup a private CA, finally generated a certificate that
installed without a hitch in IE, and came up when I subsequently connected
to my SSL enabled Tomcat. So far so good.

However there is still one major obstacle ... the server aborts the
connection right away :-

IE tells me:

The page cannot be displayed
The page you are looking for is currently unavailable.
The Web site might be experiencing technical difficulties,
or you may need to adjust your browser settings.

In other words, the usual message that indicates that the server screwed
up, and closed the connection.

Interestingly enough the Verisign certificate works just fine. So there is
apparently still a difference to Tomcat.
Have tried to connect using openssl s_client - works A-OK, also with my
home-made certificate.
Have looked in the tomcat logs to no avail. There is no trace anywhere why
the connection breaks.

So the question to the list is: how would I go by diagnosing this? I
believe that the problem must be related to the SSL container (?) that
responds to the traffic on port 443, and does all the SSL handshaking,
because my application never sees anything.
Just like in Apache there's an error log for all the pages that fail -
isn't there such a log in Tomcat?

Thanks for any input or advice you might have!

PS. If anyone is interested in a writeup or HOW-TO of making client
certificates for Tomcat, let me know. This is certainly tricky stuff!

Henrik Schultz
Senior Systems Architect
Consultant to Maersk Data AS
Tel.: +45 39 10 21 13
Mobile: +45 22 12 24 29
E-mail: [EMAIL PROTECTED]


--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Tomcat 4 - OpenSSL - IE client certificate works partially

2002-07-02 Thread Adam Greene

I would absolutely love a HOW-TO.  I have a project that is going to require
certs for security.  I will ultimately have to use a Verisign or Thawte
cert, but I can certainly test with the homemade ones.  Also, have you tried
to get Netscape or Mozilla to work??

Adam Greene
ROMulin Group Inc

885 Main St, Suite 16
Moncton, NB
E1C 1G5

Ph: (506) 863-1014 x4
Fx: (506) 854-6886

http://www.romulin.com/

-Original Message-
From: Henrik Schultz [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 01, 2002 11:43 AM
To: tomcat-user
Subject: Tomcat 4 - OpenSSL - IE client certificate works partially


Greetings all...

For those not interested in client certificates at the deep technical
level, this is probably not your favorite cup of tea. Otherwise read on.

Enabling SSL in Tomcat is really no sweat using your own home-made
certificates, thanks to the excellent  HOW-TO. Once you get your root CA
certificate installed in the right places, and a suitable certificate
installed in Tomcat, everything works just fine.

However, creating client certificates that works with IE has (at least for
me) shown to be a real pain. I've experimented for months, and tried
numerous postings on this list, but noone seemed to know the finer details.
It was only recently I had a breakthrough, in that a trial certificate from
Verisign allowed me to compare that and a home-made one, and find the bits
that makes the difference, that is, what it takes for it to be shown on the
selection list in IE when the server asks for a client certificate.
Last night I succeeded. The right combination of keytool and openssl
maneuvres to setup a private CA, finally generated a certificate that
installed without a hitch in IE, and came up when I subsequently connected
to my SSL enabled Tomcat. So far so good.

However there is still one major obstacle ... the server aborts the
connection right away :-

IE tells me:

The page cannot be displayed
The page you are looking for is currently unavailable.
The Web site might be experiencing technical difficulties,
or you may need to adjust your browser settings.

In other words, the usual message that indicates that the server screwed
up, and closed the connection.

Interestingly enough the Verisign certificate works just fine. So there is
apparently still a difference to Tomcat.
Have tried to connect using openssl s_client - works A-OK, also with my
home-made certificate.
Have looked in the tomcat logs to no avail. There is no trace anywhere why
the connection breaks.

So the question to the list is: how would I go by diagnosing this? I
believe that the problem must be related to the SSL container (?) that
responds to the traffic on port 443, and does all the SSL handshaking,
because my application never sees anything.
Just like in Apache there's an error log for all the pages that fail -
isn't there such a log in Tomcat?

Thanks for any input or advice you might have!

PS. If anyone is interested in a writeup or HOW-TO of making client
certificates for Tomcat, let me know. This is certainly tricky stuff!

Henrik Schultz
Senior Systems Architect
Consultant to Maersk Data AS
Tel.: +45 39 10 21 13
Mobile: +45 22 12 24 29
E-mail: [EMAIL PROTECTED]


--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Servlet debug.

2002-06-24 Thread Adam Greene

I know this is probably late, but if all else fails, get Eclipse
(http://www.eclipse.org) and install the Tomcat plugin (on the community
page at Eclipse).  It allows you to load Tomcat inside of Eclipse and debug
it (just like JBuilder Professional or JBuilder Enterprise, I don't think
JBuilder Personal supports Tomcat Debugging).

Adam Greene
ROMulin Group Inc

885 Main St, Suite 16
Moncton, NB
E1C 1G5

Ph: (506) 863-1014 x4
Fx: (506) 854-6886

http://www.romulin.com/

-Original Message-
From: Christophe Bouhier (ECM) [mailto:[EMAIL PROTECTED]]
Sent: Monday, June 24, 2002 12:20 AM
To: '[EMAIL PROTECTED]'
Subject: Servlet debug.

Hi,

I am using the JWSDP distribution of tomcat, and JBuilder 6 personal to
write servlets.
Everything is working fine for me: (Writting code, deploying using ant). I
spend some time
to write a suitable build.xml and this really pays off, as deploying new
code is really quick.

My next challenge is to debug the servlet. I looked around to get help, and
it seems possible to
launch tomcat from Jbuilder and be able to debug a servlet once a context is
activated.

Has anyone done this before? It seems you need to create a project, add the
tomcat libraries and creat a launcher
application. I need help with the main() method for the tomcat launcher.

Any help is welcome! TIA / Christophe



--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: MS SQL Server Datasouerce

2002-06-04 Thread Adam Greene

Make sure that you call the parameter name as username.
- Original Message -
From: Anibal Constante Brito [EMAIL PROTECTED]
To: Tomcat [EMAIL PROTECTED]
Sent: Thursday, May 30, 2002 9:40 PM
Subject: MS SQL Server Datasouerce


 A tried to create a datasource with SQL Server, but can I wiev even the
 index.htm page, why?

 this is my datasource:

 Resource name=jdbc/News auth=Container
 type=javax.sql.DataSource
  description=Employees Database for HR Applications/

 ResourceParams name=jdbc/News
   parameter
 namedriverClassName/name

valuecom.microsoft.jdbc.sqlserver.SQLServerDriver/value
   /parameter
   parameter
 namedriverName/name
 /valuejdbc:microsoft:sqlserver/value
   /parameter
   parameter
 nameuser/name
 valuesa/value
   /parameter
   parameter
 namepassword/name
 value/value
   /parameter
 /ResourceParams

 what I did wrong?

 best regards.

 Owen.

 --
 To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
 For additional commands, e-mail:
mailto:[EMAIL PROTECTED]




--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Tomcat is the best ?!

2002-06-03 Thread Adam Greene

Well, there are two ways, I guess (haven't done it yet):

1. Use the JDBC session state management (Server.xml)
2. Borland AppServer, Web Edition ($500 for computer).  It gives you fault
tolerance, load balancing, etc.  and allows you to set up on copy of Web
Edition as Apache and use it to load balance it (at least that is what they
rep told me).

Adam Greene
ROMulin Group Inc

885 Main St, Suite 16
Moncton, NB
E1C 1G5

Ph: (506) 863-1014 x4
Fx: (506) 854-6886

http://www.romulin.com/

-Original Message-
From: Sean LeBlanc [mailto:[EMAIL PROTECTED]]
Sent: Monday, June 03, 2002 11:40 AM
To: 'Tomcat Users List'
Subject: RE: Tomcat is the best ?!


 -Original Message-
 From: Chris Wilson [mailto:[EMAIL PROTECTED]]
 Sent: Monday, June 03, 2002 6:28 AM
 To: 'Tomcat Users List'
 Subject: RE: Tomcat is the best ?!


 Walid,

 Take a look at Resin from www.caucho.com.  I've found that it doesn't
 have as many spec. compliance issues as tomcat, is much faster to
 develop with (as it automatically reloads and compiles any
 servlet, jsp,
 and config changes), and is loads faster in raw performance.

 I really enjoyed working with Tomcat, but I think that once you try a
 quality, production grade server like Resin, you won't go back.

snip

I noticed Resin's web site has a link about clustering and such.
Which makes me wonder - how are people doing this in Tomcat, if they are
doing it all? Are there any whitepapers anywhere on the various ways of
accomplishing this? Any experiences to share?




--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




DataSources and JNDI

2002-05-23 Thread Adam Greene

I'm trying to get the Microsoft SQL Driver to work in doing DataSources.  It has a 
class called com.microsoft.jdbcx.sqlserver.SQLServerDataSourceFactory, but I must not 
be getting the config right or something because it keeps returning Nulls out of the 
JNDI.

server.xml:

  Resource name=jdbc/TestDB auth=Container type=javax.sql.DataSource/

  ResourceParams name=jdbc/TestDB
parameter
namefactory/name
valuecom.microsoft.jdbcx.sqlserver.SQLServerDataSourceFactory/value
/parameter
parameter
nameuser/name
valuesa/value
/parameter
parameter
namepassword/name
valueremoved/value
/parameter
parameter
namedatabaseName/name
valueTestdatabasevalue
/parameter
parameter
nameserverName/name
valuemyserver/value
/parameter
parameter
namePortNumber/name
value1433/value
/parameter
  /ResourceParams

java Code:

Context ctx = new InitialContext();


DataSource ds = (DataSource) ctx.lookup(java:/comp/env/jdbc/TestDB);



Thanks for any help you can give.

Adam Greene
Team Leader
ROMulin Group Inc
Ph:   (506) 863-1014
Fax: (506) 854-6886
http://www.romulin.com