Re: SSL: same port used in both directions?

2005-03-08 Thread Chris Hosler
The default is 8443 Christopher W. Hosler Network Administrator Ingham County MIS Department Email [EMAIL PROTECTED] As water reflects the face So a mans heart reflects the man [EMAIL PROTECTED] 3/7/2005 11:46:23 PM I have Tomcat 5.5.7 behind a router/firewall, with port 443 and 8080

SSL: same port used in both directions?

2005-03-07 Thread Mark Leone
I have Tomcat 5.5.7 behind a router/firewall, with port 443 and 8080 forwarded through the firewall. I can make connections from outside the firewall to port 8080, but not port 443 (it times out). I can access port 443 on my server if I browse to my server's LAN address or if I browse to my

Re: Tomcat 5 / SSL / Digsigtrust Certificate...

2005-03-07 Thread John Urban
I figured it out. I was importing the new signed cert to a new alias in my keystore, rather than the original key I generated when I created the keystore. And, Netscape's CA Chain certs work with JBoss/Tomcat5. John Urban wrote: I have sent my CSR and been approved and received my SSL Web server

Re: Tomcat 5 / SSL / Digsigtrust Certificate...

2005-03-05 Thread John Urban
I have sent my CSR and been approved and received my SSL Web server certificate from Digsigtrust. I have having problems getting the SSL certificate to install properly. I have tried every conceivable combinations to getting my browser to NOT pop up the Security Alart dialog. Most

tomcat 4.1.x with jdk1.4.2 ssl certificate(4096-key length) support

2005-03-04 Thread Matej Kafadar
Hello, is it possible to have tomcat 4.1.x running with jdk1.4.2 and have SSL with client authentication(client has certificate issued by CA which has certificate with public key length of 4096 bit)? Java 1.4 doesn't support rsa key size of 4096 (only to 2084). With keytool you aren't able

SSL Question

2005-03-01 Thread Reis, Tom
I have a quick question about SSL. If I am already running SSL on a server with a certificate imported into a .keystore file and I create a new certificate will it automatically overwrite the .keystore file by creating a new one or does it just add the info into the existing .keystore

Re: SSL Question

2005-03-01 Thread Chris Hosler
a quick question about SSL. If I am already running SSL on a server with a certificate imported into a .keystore file and I create a new certificate will it automatically overwrite the .keystore file by creating a new one or does it just add the info into the existing .keystore file. Thanks

Re: SSL Question

2005-03-01 Thread Jason Bainbridge
On Tue, 1 Mar 2005 09:44:36 -0600, Reis, Tom [EMAIL PROTECTED] wrote: I have a quick question about SSL. If I am already running SSL on a server with a certificate imported into a .keystore file and I create a new certificate will it automatically overwrite the .keystore file

Tomcat SSL.

2005-02-27 Thread deepak suldhal
Hi I am using Tomcat 5.0.28, I need to have ssl configured, What are the steps in getting this. Any document and help is appreciated. Thanks __ Do you Yahoo!? Yahoo! Sports - Sign up for Fantasy Baseball. http

Re: Tomcat SSL.

2005-02-27 Thread Omar Adobati
take a look here: http://jakarta.apache.org/tomcat/tomcat-5.0-doc/ssl-howto.html On Sun, 27 Feb 2005 13:58:45 -0800 (PST), deepak suldhal [EMAIL PROTECTED] wrote: Hi I am using Tomcat 5.0.28, I need to have ssl configured, What are the steps in getting this. Any document and help

Tomcat and SSL

2005-02-27 Thread deepak suldhal
Hi I followed the document http://jakarta.apache.org/tomcat/tomcat-5.0-doc/ssl-howto.html and reached to a point where I created .keystore file. * This .keystore is now located at C:\Documents and Settings\Owner * Where as my Tomcat is at C:\jakarta-tomcat-5.0.28 What is the default location

Tomcat and SSL

2005-02-27 Thread deepak suldhal
Hi I followed the document http://jakarta.apache.org/tomcat/tomcat-5.0-doc/ssl-howto.html and reached to a point where I created .keystore file. * This .keystore is now located at C:\Documents and Settings\Owner * Where as my Tomcat is at C:\jakarta-tomcat-5.0.28 What is the default location

Re: Tomcat and SSL

2005-02-27 Thread Jason Bainbridge
On Sun, 27 Feb 2005 16:22:52 -0800 (PST), deepak suldhal [EMAIL PROTECTED] wrote: Hi I followed the document http://jakarta.apache.org/tomcat/tomcat-5.0-doc/ssl-howto.html and reached to a point where I created .keystore file. * This .keystore is now located at C:\Documents and Settings

Tomcat and SSL

2005-02-27 Thread deepak suldhal
Hi when I type set on command line I see HOMEPATH=\Documents and Settings\Owner CATALINA_HOME=C:\jakarta-tomcat-5.0.28 And my keystore file is at C:\Documents and Settings\Owner\.keystore I uncommented the server.xml file to enable the 8443 port as secure ssl port. Retarted tomcat server

SSL Client authentication against MemoryRealm

2005-02-25 Thread Jesus De Oliveira
Hi, The SSL client authentication doesn't work agains MemoryRealm, because the authentication mechanism passes the DN of the client certificate to the realm after validation for role assignement, but the memory realm don't allow usernames that contains , or = characters. Because the DN contains

Re: Load balancing SSL sessions

2005-02-23 Thread Kelly Vista
SSL sessions Date: Tue, 22 Feb 2005 16:01:10 -0600 you can also use DNS round robin, www.mysite.com resolves to two or more IP addresses. Filip Andrew Miehs wrote: We use F5 BigIPs, but they are probably overkill for your application - The cisco probably will be as well. A 'Cheap' software solution

Re: Load balancing SSL sessions

2005-02-23 Thread Kelly Vista
BTW, I believe there is another issue with DNS round robin -- no support for sticky sessions. There is no assurance that a series of requests (i.e., a session) for a particular client IP or client with a particular session ID will be routed to the same server. Also, SSL sticky sessions

Re: Load balancing SSL sessions

2005-02-23 Thread andrew
) they then redirect the traffic server1.mysite.com, or server2.mysite.com This way the session then stays on server1 or server2. As I said though, you will need 2 certificates if you do not want the clients complaining about broken ssl certificates. Anderw Kelly Vista wrote: Thanks Andrew. In answer

RE: Load balancing SSL sessions

2005-02-23 Thread James Richardson
On Feb 22, 2005, at 10:24 PM, Kelly Vista wrote: Hi - We are looking to deploy our app, running on Tomcat 5, soon and are exploring load balancing options. We are looking at H/W and S/W solutions, and I was wondering if anyone had any past experience/advice they would like to

Tomcat behind Apache + SSL + htaccess

2005-02-23 Thread Xavier Jeannin
Hello Sorry if this is a trivial question. I have read Tomcat Documentation and list Archive and as I am not a specialist of Tomcat, I am not sure of my understanding. first, tomcat is behind apache. I want the access to a servlet be secured by client certificate and to check who can access to

Re: Tomcat 5.0.28 and ssl

2005-02-23 Thread James Sys
certificate from verisign. I have configured the Tomcat server to use SSL and it shows the certificate is valid but it says the name on certificate does not match the site. I look at the name on the certificate and it is the dsn name of the server. Is there something I am missing

Tomcat 5.0.28 and ssl

2005-02-22 Thread Reis, Tom
I have set a Tomcat 5.0.28 server with jsdk 1.4.2_04. I had setup the keystore and imported the received certificate from verisign. I have configured the Tomcat server to use SSL and it shows the certificate is valid but it says the name on certificate does not match the site. I look

Load balancing SSL sessions

2005-02-22 Thread Kelly Vista
requirement is that the LB solution support sticky SSL sessions. I know that H/W LB (like Coyote Point Equalizer and Cisco LocalDirector) can do the LB + SSL acceleration, which I believe would do the job. However, I would be interested to know if there is a S/W LB solution that people would recommend

Re: Load balancing SSL sessions

2005-02-22 Thread Andrew Miehs
We use F5 BigIPs, but they are probably overkill for your application - The cisco probably will be as well. A 'Cheap' software solution might be to work with redirects, and 2 separate IP addresses. ie: ssl1.mysite.com and ssl2.mysite.com - You will need 2 ssl keys though for this to work

Re: Tomcat 5.0.28 and ssl

2005-02-22 Thread Chris Hosler
PROTECTED] 2/22/2005 3:44:23 PM I have set a Tomcat 5.0.28 server with jsdk 1.4.2_04. I had setup the keystore and imported the received certificate from verisign. I have configured the Tomcat server to use SSL and it shows the certificate is valid but it says the name on certificate does

Re: Load balancing SSL sessions

2005-02-22 Thread Filip Hanik - Dev Lists
separate IP addresses. ie: ssl1.mysite.com and ssl2.mysite.com - You will need 2 ssl keys though for this to work. Does all of your app require ssl? or just a certain part, ie: payment. Do you need the stickiness for the whole app? or just for the ssl (seeing you are using tomcat, you will probably

Re: Load balancing SSL sessions

2005-02-22 Thread Andrew Miehs
and ssl2.mysite.com - You will need 2 ssl keys though for this to work. Does all of your app require ssl? or just a certain part, ie: payment. Do you need the stickiness for the whole app? or just for the ssl (seeing you are using tomcat, you will probably need it for the whole app)... Andrew On Feb

Re: Load balancing SSL sessions

2005-02-22 Thread Kelly Vista
Thanks Andrew. In answer to your question, some of our app requires SSL -- exactly like an order-style app (but it's not a product ordering app). So, a person's session might involve the following path: 1. non SSL req 2. non SSL req 3. SSL req 4. non SSL req and we'd like that entire session

problem with ssl

2005-02-21 Thread Thavarajah Kurinchikumaran
Hi all, I am using tomcat as my local server. I removed some keystore files which I created earlier using the keytool delete command . Then I created new keystore file using the command below keytool -genkey -keyalg RSA -alias tomcat -keystore .keystore But when I browse the secure page via

Re: problem with ssl

2005-02-21 Thread Antony Paul
You can check whether the keystore is properly created using the following command keytool -list -alias tomcat rgds Antony Paul On 22 Feb 2005 12:24:05 +0600, Thavarajah Kurinchikumaran [EMAIL PROTECTED] wrote: Hi all, I am using tomcat as my local server. I removed some keystore files

RE: SSL config

2005-02-17 Thread Warron French
, February 16, 2005 6:26 PM To: User Tomcat (E-mail) Subject: SSL config Somehow I have an Apache-2.0.40 server running in conjunction with Jboss-3.2.5. I don't know anything about JBoss really, but it appears that JBoss is doing the securing of the socket layer (SSL stuff) for this website

SSL config

2005-02-16 Thread Warron French
Somehow I have an Apache-2.0.40 server running in conjunction with Jboss-3.2.5. I don't know anything about JBoss really, but it appears that JBoss is doing the securing of the socket layer (SSL stuff) for this website. There is not reference to 443 or SSLCertificate or the like in my

SSL Under Tomcat 5.0

2005-02-15 Thread Jeff Gimprich
Hi, I'm new to Tomcat, so forgive my (temporary) naivite. I need to get my ecommerce web site (JSP) up and running, but when I add the connector for SSL to the server.xml Tomcat goes into an infinite loop with the following error message when the server attempts an SSL handshake (repeats ad

tomcat + SSL, apache

2005-02-14 Thread Laurentiu Vasiescu
Is there any way to have the Tomcat with SSL and a front-end Apache, wich should only serve as a interface between client and tomcat? I mean tomcat should serve the certificates and do all the ssl, apache only to redirect traffic to it. thanks. Laurentiu VasiescuNetwork Administrator

Re: tomcat + SSL, apache

2005-02-14 Thread Wouter Boers
Don't think so. Apache takes on the connection and therefore is in charge of the SSL handshake. So you will have to confiure apache to support SSL. They only way to make tomcat handle the handshake is to make it directly available to the browser. But guess you allready kind of suspected

Re: tomcat + SSL, apache

2005-02-14 Thread Jason Bainbridge
On Mon, 14 Feb 2005 15:25:59 +0200, Laurentiu Vasiescu [EMAIL PROTECTED] wrote: Is there any way to have the Tomcat with SSL and a front-end Apache, wich should only serve as a interface between client and tomcat? I mean tomcat should serve the certificates and do all the ssl, apache only

RE: tomcat + SSL, apache

2005-02-14 Thread Didier McGillis
+ SSL, apache Date: Mon, 14 Feb 2005 15:25:59 +0200 Is there any way to have the Tomcat with SSL and a front-end Apache, wich should only serve as a interface between client and tomcat? I mean tomcat should serve the certificates and do all the ssl, apache only to redirect traffic to it. thanks

Re: tomcat + SSL, apache

2005-02-14 Thread Mladen Turk
Didier McGillis wrote: Actually I believe its the opposite. Apache serves the certificate the communication between Tomcat and Apache shouldnt be public anyway. Apache makes the SSL handshake and passes any client certificate to Tomcat. Any servlet sees that like it came directly from Tomcat

configuring SSL on tomcat 5

2005-02-09 Thread Chris Hosler
I have a brand new tomcat 5 server that is up and running. I am also brand new when it comes to Tomcat. I need to configure SSL on it . I pulled the how to documents off the local server and I also pulled a document off verisign website ID# VS26254 Which is for configuring a tomcat ver4 server. I

mod_jk, apache, ssl

2005-02-04 Thread Ethan Sutin
Quick question regarding mod_jk and ssl. Situation: apache 1.3 running mod_ssl mod_jk 1.2.8 multiple tomcat workers Question: If apache is fronting a set of load balanced tomcats, and requests are https, is all ssl decoding done in apache and then requests sent to tomcat via AJP? Do

Using SSL for selected pages only

2005-02-03 Thread Trond G. Ziarkowski
-guaranteeCONFIDENTIAL/transport-guarantee /user-data-constraint /security-constraint Tomcat now redirects all requests to myapp/home/* to use ssl. In my jsp's I use c:url to create relative urls in links. When the user stands in i.e /myapp/home/userInfo.htm and now presses the link to go

Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-31 Thread sulaiman jrar
I am having problem doing sessionreplication apache give me this problem [Mon Jan 31 07:51:02 2005] [notice] config.update(): done config: [Mon Jan 31 07:51:02 2005] [notice] config.update(): done channel.socket:localhost:8009 [Mon Jan 31 07:51:02 2005] [notice] config.update(): done

Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-31 Thread Filip Hanik - Dev
start your own thread - Original Message - From: sulaiman jrar [EMAIL PROTECTED] To: Tomcat Users List tomcat-user@jakarta.apache.org Sent: Monday, January 31, 2005 1:54 PM Subject: Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 I am having problem doing

RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-31 Thread Richard Mixon (qwest)
It appears that you are using the deprecated JK2, not JK 1.2.8 that this thread is discussing. Please start a new thread with the appropriate title and you might get better responses. - Richard sulaiman jrar wrote: I am having problem doing sessionreplication apache give me this problem [Mon

Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-28 Thread Peter Rossbach
@jakarta.apache.org Sent: Wednesday, January 26, 2005 6:44 PM Subject: RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 Filip, Pen does not really help me out. My problem is JK I am pretty sure. It is appending .srv1 to the session. When srv1 is stopped, it detects this on the next

RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-28 Thread Richard Mixon (qwest)
Peter Rossbach wrote: That true, I add the JvmRouteBinderValve to the codebase to switch the Session to other node after failure. It works with Tomcat 5.5.5 Config: a) Add Valve at your conf/Catalina/localhost/context.xml.default or context.xml Context Valve

Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Markus Schönhaber
Punit Duggal wrote: What language is this ?? Dutch. It would really be nice if those bounce-messages could get filtered out. I received 40 of them since Jan 24. which is about 15% of the overall traffic on the list since then. Regards mks

Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Filip Hanik - Dev
- From: Richard Mixon (qwest) [EMAIL PROTECTED] To: Tomcat Users List tomcat-user@jakarta.apache.org Sent: Wednesday, January 26, 2005 6:44 PM Subject: RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 Filip, Pen does not really help me out. My problem is JK I am pretty sure

RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Richard Mixon (qwest)
? Thank you - Richard Mixon -Original Message- From: Filip Hanik - Dev [mailto:[EMAIL PROTECTED] Sent: Thursday, January 27, 2005 7:29 AM To: Tomcat Users List Cc: [EMAIL PROTECTED] Subject: Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 yes, There is code that takes

Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Filip Hanik - Dev
tomcat-user@jakarta.apache.org Cc: [EMAIL PROTECTED] Sent: Thursday, January 27, 2005 9:37 AM Subject: RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 Filip, Thank you - that appears to be what I need. Unfortunately the only documentation I can find is at: http

RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Richard Mixon (qwest)
-Original Message- From: Filip Hanik - Dev [mailto:[EMAIL PROTECTED] Sent: Thursday, January 27, 2005 9:02 AM To: Tomcat Users List Cc: [EMAIL PROTECTED] Subject: Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 Try to configure the JvmRouteSessionIDBinderLifecycleListener

Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Filip Hanik - Dev
Users List tomcat-user@jakarta.apache.org Sent: Thursday, January 27, 2005 10:55 AM Subject: RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 Filip/all, Thank you - with your suggestion I was able to get it configured as follows: 1) After the Server line in server.xml I added

Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Robert F. Hall
Dutch? Punit Duggal wrote: What language is this ?? From: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: tomcat-user@jakarta.apache.org Subject: Re: Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 Date: 26 Jan 2005 23:13:47 - Geachte relatie, Het door u gebruikte e

RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Richard Mixon (qwest)
, 2005 11:26 AM To: Richard Mixon (qwest); Tomcat Users List Cc: Filip Hanik - Dev [EMAIL PROTECTED] Subject: RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 Never mind. Sorry for the dumb questions, its in my application ontext. - Richard -Original Message- From

Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Filip Hanik - Dev
: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 However, First, Filip, thank you sincerely for your persistence in helping me. I am committed to writing up a HOWTO for this general use case when done and will post the same. But I am not quite there :( After placing this statement

RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Richard Mixon (qwest)
Replication/Clustering, SSL and failover in Tomcat 5 Filip, Yes you did say that earlier. However I do not reference PersistentManager anywhere in my server.xml. How is it getting enable? Here is the clustering part if my server.xml (I can send the entire server.xml if necessary). Cluster

RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Richard Mixon (qwest)
] Sent: Thursday, January 27, 2005 10:34 AM To: Tomcat Users List Cc: [EMAIL PROTECTED] Subject: Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 As mentioned, you can't have the persistence manager, with clustering. DEBUG TP-Processor3

Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Filip Hanik - Dev
Replication/Clustering, SSL and failover in Tomcat 5 Filip, Yes you did say that earlier. However I do not reference PersistentManager anywhere in my server.xml. How is it getting enable? Here is the clustering part if my server.xml (I can send the entire server.xml if necessary). Cluster

RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Richard Mixon (qwest)
@jakarta.apache.org Cc: Sent: Thursday, January 27, 2005 12:08 PM Subject: RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 Filip, Yes you did say that earlier. However I do not reference PersistentManager anywhere in my server.xml. How is it getting enable? Here is the clustering

Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Robert F. Hall
Try killing one of the Tomcat JVM's at the OS level. -Robert Richard Mixon (qwest) wrote: Filip, Thanks so much for some reason taking the Manager statement completely out of the context worked. I can now see session replication occurring, which then identified some objects that were not

Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Filip Hanik - Dev lists
/Clustering, SSL and failover in Tomcat 5 Filip, Yes you did say that earlier. However I do not reference PersistentManager anywhere in my server.xml. How is it getting enable? Here is the clustering part if my server.xml (I can send the entire server.xml if necessary). Cluster className

RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Richard Mixon (qwest)
Robert F. Hall wrote: Try killing one of the Tomcat JVM's at the OS level. Robert - thanks! That worked. - Richard - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Richard Mixon (qwest)
Filip Hanik - Dev lists wrote: expireSessionsOnShutdown=true set this property to false! this will not kill the sessions on the other servers during shutdown. but, yes kill -9 or taskmanager killing it, will work too Filip, Thank you so much. Setting expireSessionsOnShutdown=false allowed

Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Filip Hanik - Dev lists
Interesting, I haven't done any work with the latest work of tomcat because of engagements elsewhere. but you have the time to create a very small simple war file where this occurs, I will look at it tomorrow. It looks like the context class loader is not getting set properly, and this could

Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Filip Hanik - Dev lists
I meant, if you have time to create a simple test app, that I can work with, it will speed up the process Filip Filip Hanik - Dev lists wrote: Interesting, I haven't done any work with the latest work of tomcat because of engagements elsewhere. but you have the time to create a very small

Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Filip Hanik - Dev lists
another thought, this object com.ltoj.webapp.util.ClassGrid does it contain a reference to a struts object, and maybe that is why the loading doesn't work, just a thought. Filip Filip Hanik - Dev lists wrote: Interesting, I haven't done any work with the latest work of tomcat because of

RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Richard Mixon (qwest)
Filip Hanik - Dev lists wrote: another thought, this object com.ltoj.webapp.util.ClassGrid does it contain a reference to a struts object, and maybe that is why the loading doesn't work, just a thought. Filip Hanik - Dev lists wrote: Interesting, I haven't done any work with the latest

Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Filip Hanik - Dev lists
Hi Richard, Static variable don't get serialized with an object (anyone correct me if I am wrong), so that is not the problem. I believe it to be a bug. Struts is taking a class loader and loading the data, my guess is that its taking the context classloader, and that one is not set properly.

RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-27 Thread Richard Mixon (qwest)
Filip Hanik - Dev lists wrote: Hi Richard, Static variable don't get serialized with an object (anyone correct me if I am wrong), so that is not the problem. I believe it to be a bug. Struts is taking a class loader and loading the data, my guess is that its taking the context classloader,

JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-26 Thread Richard Mixon (qwest)
I am trying to get JK 1.2.8 (within Apache 2.0.52 SSL build) to fail over to my remaining Tomcat 5.5.7 instance when the first instance is brought down (e.g. for maintenance or due to an actual failure). The application uses container managed authentication (CMA) and obviously sessions. I have

Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-26 Thread Filip Hanik - Dev
Message - From: Richard Mixon (qwest) [EMAIL PROTECTED] To: tomcat-user@jakarta.apache.org Sent: Wednesday, January 26, 2005 4:37 PM Subject: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 I am trying to get JK 1.2.8 (within Apache 2.0.52 SSL build) to fail over to my

Re: Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-26 Thread bounce
Geachte relatie, Het door u gebruikte e-mailadres is niet meer actief. U kunt uw e-mailbericht sturen naar [EMAIL PROTECTED] of dit bericht beantwoorden. Bedankt voor uw medewerking, Met vriendelijke groet, ATP Hypotheken Het Spoor 40 3994 AK Houten Tel. 030 750 25 33 Fax. 030 750 25 88

Re: Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-26 Thread Punit Duggal
What language is this ?? From: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: tomcat-user@jakarta.apache.org Subject: Re: Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 Date: 26 Jan 2005 23:13:47 - Geachte relatie, Het door u gebruikte e-mailadres is niet meer actief

Re: Re: Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-26 Thread bounce
Geachte relatie, Het door u gebruikte e-mailadres is niet meer actief. U kunt uw e-mailbericht sturen naar [EMAIL PROTECTED] of dit bericht beantwoorden. Bedankt voor uw medewerking, Met vriendelijke groet, ATP Hypotheken Het Spoor 40 3994 AK Houten Tel. 030 750 25 33 Fax. 030 750 25 88

RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-26 Thread Richard Mixon (qwest)
:[EMAIL PROTECTED] Sent: Wednesday, January 26, 2005 4:10 PM To: Tomcat Users List Subject: Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 try with a regular tcp loadbalancer like pen (http://siag.nu/) first, otherwise you are debugging a whole stack at once. so use pen, and your

Re: RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-26 Thread bounce
Geachte relatie, Het door u gebruikte e-mailadres is niet meer actief. U kunt uw e-mailbericht sturen naar [EMAIL PROTECTED] of dit bericht beantwoorden. Bedankt voor uw medewerking, Met vriendelijke groet, ATP Hypotheken Het Spoor 40 3994 AK Houten Tel. 030 750 25 33 Fax. 030 750 25 88

RE: Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-26 Thread Richard Mixon (qwest)
it?). - Richard -Original Message- From: Punit Duggal [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 26, 2005 5:19 PM To: [EMAIL PROTECTED]; tomcat-user@jakarta.apache.org Subject: Re: Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 What language is this ?? From

Re: RE: Re: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

2005-01-26 Thread bounce
Geachte relatie, Het door u gebruikte e-mailadres is niet meer actief. U kunt uw e-mailbericht sturen naar [EMAIL PROTECTED] of dit bericht beantwoorden. Bedankt voor uw medewerking, Met vriendelijke groet, ATP Hypotheken Het Spoor 40 3994 AK Houten Tel. 030 750 25 33 Fax. 030 750 25 88

RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 *NOTE TO LIST ADMINISTRATOR*

2005-01-26 Thread Brad Cobb
, eventually... Brad -Original Message- From: Richard Mixon (qwest) [mailto:[EMAIL PROTECTED] Sent: Thu 27/01/2005 8:45 AM To: Tomcat Users List Cc: Subject: RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5

Re: RE: JK, Session Replication/Clustering, SSL and failover in Tomcat 5 *NOTE TO LIST ADMINISTRATOR*

2005-01-26 Thread bounce
Geachte relatie, Het door u gebruikte e-mailadres is niet meer actief. U kunt uw e-mailbericht sturen naar [EMAIL PROTECTED] of dit bericht beantwoorden. Bedankt voor uw medewerking, Met vriendelijke groet, ATP Hypotheken Het Spoor 40 3994 AK Houten Tel. 030 750 25 33 Fax. 030 750 25 88

Installing SSL into tomcat

2005-01-24 Thread Mumanyi Bravismore
Sorry for my ignorance. Is there anyone who happens to have a guide on how to install SSL into tomcat. I have tried using the method that comes with tomcat documentation with no success. Thanks Regards /Bravo - To unsubscribe

Re: Installing SSL into tomcat

2005-01-24 Thread Tim Funk
There are 2 ssl links here ... http://wiki.apache.org/jakarta-tomcat/UsefulLinks -Tim Mumanyi Bravismore wrote: Sorry for my ignorance. Is there anyone who happens to have a guide on how to install SSL into tomcat. I have tried using the method that comes with tomcat documentation

Re-Post SSL and Tomcat

2005-01-24 Thread stuff
I would really appreciate any help on this. I have two applications running on a Tomcat server. One is the main webpage and the other is a shopping cart for that webpage. I would like to set up a secure checkout for the cart. Is it best to encrypt the whole cart or just part of the cart? Should

Configuring Tomcat 4.0 to communicate with an SSL-enabled Apache server

2005-01-21 Thread Richard.R.Myers
Where can one find information on configuring Tomcat 4.0 to communicate with an SSL-enabled Apache server? The 4.0 Tomcat documents on SSL (See http://jakarta.apache.org/tomcat/tomcat-4.0-doc/ssl-howto.html under the heading SSL and Tomcat) has this paragraph: It is important to note

Re: multiple ips, multiple ssl certificates and port forwarding

2005-01-20 Thread rk
hello hassan! thanks for your input ... i guess i finally found out what it was, though it still seems a little bit strange to me: the portforwarding is the problem, without it, the right ssl certificate is chosen, otherwise the system takes the one of the ip adress associated with eth0. hmm

SSL and Tomcat

2005-01-19 Thread Chris Cherrett
I have two applications running on a Tomcat server. One is the main webpage and the other is a shopping cart for that webpage. I would like to set up a secure checkout for the cart. Is it best to encrypt the whole cart or just part of the cart? Should the main website and the cart be on the

Tomcat 5 - Apache2 SSL with mod_proxy

2005-01-19 Thread Kris Reese
) --- !-- non-SSL HTTP/1.1 Connector on port 8080 is commented out -- !-- SSL HTTP/1.1 Connector on port 8443 is commented out -- !-- Define an AJP 1.3 Connector on port 8009 -- NOTE I AM NOT USING THIS -- Connector port=8009 enableLookups=false

Re: multiple ips, multiple ssl certificates and port forwarding

2005-01-18 Thread rk
hello! At 17:58 17.01.2005, you wrote: [EMAIL PROTECTED] wrote: the keystore syntax is correct, as it works with one keytore ... the problem arises when there are multiple virtual hosts, it takes always one of them, but not the corresponding I'm puzzled by two aspects of your setup: 1) why don't

Re: multiple ips, multiple ssl certificates and port forwarding

2005-01-18 Thread rk
associated with the used keystore) .. has anybody a working tomcat 4.1.x configuration with multiple ips and ssl keystores? kind regards randolph At 16:00 17.01.2005, you wrote: hello everybody! i'm new to this list and dont have too much tomcat expericence but i've been searching for a while

Re: multiple ips, multiple ssl certificates and port forwarding

2005-01-18 Thread Hassan Schroeder
to the one associated with the used keystore) .. has anybody a working tomcat 4.1.x configuration with multiple ips and ssl keystores? Yes, one service with multiple connectors for different IPs using different keystores. It works fine, and I don't see any significant difference between my

Re: multiple ips, multiple ssl certificates and port forwarding

2005-01-18 Thread rk
are mapped to the one associated with the used keystore) .. has anybody a working tomcat 4.1.x configuration with multiple ips and ssl keystores? Yes, one service with multiple connectors for different IPs using different keystores. It works fine, and I don't see any significant difference

Re: multiple ips, multiple ssl certificates and port forwarding

2005-01-18 Thread Hassan Schroeder
[EMAIL PROTECTED] wrote: hmm ... portforwarding works with jetty (on the same ports), so it should also work with tomcat, and i'd rather have tomcat on a non privileged port. You can always add it back in, once you've resolved the problem (and confirmed that's *not* part of it). But that's just

multiple ips, multiple ssl certificates and port forwarding

2005-01-17 Thread rk
hello everybody! i'm new to this list and dont have too much tomcat expericence but i've been searching for a while to solve the following problem - unfortunately up to date without success: here is my little mind bender ;-) i have tomcat 4.1.31 running on a linux server, to use multiple ssl

Re: multiple ips, multiple ssl certificates and port forwarding

2005-01-17 Thread Parsons Technical Services
I think you have an error in your server.xml. The path to the keystore and other SSL fields are in the Factory element instead of the connector element. !-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 -- Connector className=org.apache.coyote.tomcat4.CoyoteConnector

Re: multiple ips, multiple ssl certificates and port forwarding

2005-01-17 Thread rk
) at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:156) Catalina.stop: LifecycleException: This server has not yet been started LifecycleException: This server has not yet been started At 16:35 17.01.2005, you wrote: I think you have an error in your server.xml. The path to the keystore and other SSL fields

Re: multiple ips, multiple ssl certificates and port forwarding

2005-01-17 Thread Parsons Technical Services
unfortunately this does not seem to solve the problem ... but results in the following error (as the given keystore cannot be used) Jan 17, 2005 4:59:29 PM org.apache.coyote.http11.Http11Protocol init INFO: Initializing Coyote HTTP/1.1 on http-62.116.64.7-8080 Jan 17, 2005 4:59:29 PM

Re: multiple ips, multiple ssl certificates and port forwarding

2005-01-17 Thread rk
the keystore syntax is correct, as it works with one keytore ... the problem arises when there are multiple virtual hosts, it takes always one of them, but not the corresponding At 17:30 17.01.2005, you wrote: unfortunately this does not seem to solve the problem ... but results in the

Re: multiple ips, multiple ssl certificates and port forwarding

2005-01-17 Thread Hassan Schroeder
Parsons Technical Services wrote: unfortunately this does not seem to solve the problem ... but results in the following error (as the given keystore cannot be used) java.io.FileNotFoundException: /home/essence/.keystore (No such file or directory) First, the give server.xml showed the keystore

Re: multiple ips, multiple ssl certificates and port forwarding

2005-01-17 Thread Hassan Schroeder
[EMAIL PROTECTED] wrote: the keystore syntax is correct, as it works with one keytore ... the problem arises when there are multiple virtual hosts, it takes always one of them, but not the corresponding I'm puzzled by two aspects of your setup: 1) why don't you just assign the proper ports in

Re: multiple ips, multiple ssl certificates and port forwarding

2005-01-17 Thread Parsons Technical Services
Tomcat needs the name of the keystore to be .keystore No it doesn't. The name (and path) is arbitrary, which is why there *is* a keystoreFile attribute. As I said before, I haven't done this myself. I have, and none of my installations use .keystore as the file name... That is why I made the

<    1   2   3   4   5   6   7   8   9   10   >