Problem with SSL / JSSE in Tomcat using a PKCS12_truststore_ - a curly one

2005-06-29 Thread Nigel Smith
Hi there, I'm having trouble with an interesting problem. I have a keystore and a truststore setup, both as pkcs12 stores. I'm telling tomcat about the keystore by something like the following code (I actually do it in spring, and so I've translated it into plain java code here for simplicity

Re: Problem with SSL

2005-03-27 Thread Mark Thomas
The resource you are looking for is the relevant servlet specification. See http://java.sun.com/products/servlet/reference/api/index.html The spec is *required* reading for anyone developing with servlets. Be aware that INTEGRAL does not require the data to be encrypted, only that the integrity of

Re: Problem with SSL

2005-03-27 Thread bar_rin
Hey it works! Thank you for enlightening me. But i would like to know why it works. If you can point me to some resources to explain this. I think in order for the client server to communicate over SSL the crucial setting is INTEGRAL NONE will mean no SSL. is just to specify how we want to ath

Re: Problem with SSL

2005-03-27 Thread Mark Thomas
If you don't want the clients to have to provide a client certificate, don't specify CLIENT-CERT in your web.xml Mark [EMAIL PROTECTED] wrote: I tried setting it to true and it still does not work. --- Mark Thomas <[EMAIL PROTECTED]> wrote: From the Tomcat documentation: clientAuth Set to true

Re: Problem with SSL

2005-03-27 Thread bar_rin
I tried setting it to true and it still does not work. --- Mark Thomas <[EMAIL PROTECTED]> wrote: > From the Tomcat documentation: > > clientAuth > Set to true if you want the SSL stack to require a > valid certificate > chain from the client before accepting a connection. > A false value > (

Re: Problem with SSL

2005-03-27 Thread Mark Thomas
From the Tomcat documentation: clientAuth Set to true if you want the SSL stack to require a valid certificate chain from the client before accepting a connection. A false value (which is the default) will not require a certificate chain unless the client requests a resource protected by a secu

Re: Problem with SSL

2005-03-27 Thread bar_rin
By right the client should not be asked to present a cert because my server.xml setting is set to clientAuth="false" --- Mark Thomas <[EMAIL PROTECTED]> wrote: > The problem appears to be that no client certificate > is presented by > your client. Do you get prompted by your browser to > specify

Re: Problem with SSL

2005-03-27 Thread Mark Thomas
The problem appears to be that no client certificate is presented by your client. Do you get prompted by your browser to specify a client certificate? Browsers may be configured not to prompt for a certificate in any or all of the following cases: - No client certs have been imported into the b

Problem with SSL

2005-03-27 Thread bar_rin
web.xml: http://localhost/dtd/web-app_2_3.dtd";> driverClassName com.mysql.jdbc.Driver dbUsername root dbPassword sql4dm1n2003

Re: problem with ssl

2005-02-21 Thread Antony Paul
You can check whether the keystore is properly created using the following command keytool -list -alias tomcat rgds Antony Paul On 22 Feb 2005 12:24:05 +0600, Thavarajah Kurinchikumaran <[EMAIL PROTECTED]> wrote: > Hi all, > > I am using tomcat as my local server. > I removed some keystore fil

problem with ssl

2005-02-21 Thread Thavarajah Kurinchikumaran
Hi all, I am using tomcat as my local server. I removed some keystore files which I created earlier using the "keytool delete" command . Then I created new keystore file using the command below keytool -genkey -keyalg RSA -alias tomcat -keystore .keystore But when I browse the secure page via t

RE: Problem with ssl

2004-11-21 Thread Carl Olivier
Hi. Thanks. Just cannot seem to see that attribute in the docs? Maybe I am just blind! :) Carl -Original Message- From: Bill Barker [mailto:[EMAIL PROTECTED] Sent: Saturday, November 20, 2004 9:42 PM To: [EMAIL PROTECTED] Subject: Re: Problem with ssl "Carl Olivier&quo

Re: Problem with ssl

2004-11-20 Thread Bill Barker
gt; From: Bill Barker [mailto:[EMAIL PROTECTED] > Sent: Saturday, November 20, 2004 4:42 AM > To: [EMAIL PROTECTED] > Subject: Re: Problem with ssl > > > <[EMAIL PROTECTED]> wrote in message > news:[EMAIL PROTECTED] >> I'm using ssl with tomcat 5.0.28 >>

RE: Problem with ssl

2004-11-19 Thread Carl Olivier
Greetings. Where is this specified? In which element? Thanks! Carl -Original Message- From: Bill Barker [mailto:[EMAIL PROTECTED] Sent: Saturday, November 20, 2004 4:42 AM To: [EMAIL PROTECTED] Subject: Re: Problem with ssl <[EMAIL PROTECTED]> wrote in message news:[EMAIL PRO

Re: Problem with ssl

2004-11-19 Thread Bill Barker
<[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > I'm using ssl with tomcat 5.0.28 > I use a keystore that contains several certificates > How can I tell tomcat which one to use for SSL transaction ? > Is there a parameter like "alias" ? > The correct attribute is 'keyAlias' to speci

Re: Problem with ssl

2004-11-19 Thread Sailing Cai
You can config SSL with Tomcat5.0.28 by read these: http://jakarta.apache.org/tomcat/tomcat-5.0-doc/ssl-howto.html On Fri, 19 Nov 2004 15:52:58 +0100, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > I'm using ssl with tomcat 5.0.28 > I use a keystore that contains several certificates > How can I

Problem with ssl

2004-11-19 Thread valerie . bauche
I'm using ssl with tomcat 5.0.28 I use a keystore that contains several certificates How can I tell tomcat which one to use for SSL transaction ? Is there a parameter like "alias" ? Valerie - To unsubscribe, e-mail: [EMAIL PROT

RE: Problem with SSL configuration

2004-08-06 Thread binoy.patrick
Yes I tried that, still I get the same error. Binoy -Original Message- From: Dennis Dai [mailto:[EMAIL PROTECTED] Sent: 06 August 2004 09:12 To: Tomcat Users List Subject: Re: Problem with SSL configuration On 8/6/2004 1:05 AM, [EMAIL PROTECTED] wrote: > maxThre

Re: Problem with SSL configuration

2004-08-06 Thread Dennis Dai
On 8/6/2004 1:05 AM, [EMAIL PROTECTED] wrote: maxSpareThreads="75" enableLookups="false" disableUploadTimeout="true" acceptCount="100" debug="0" scheme="https" secure="true"> className="org.apache.coyote.tomcat5.CoyoteConnector" clientAuth="fals

RE: Problem with SSL configuration

2004-08-06 Thread binoy.patrick
Hi all, Can somebody help me in solving this? Regards Binoy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: 05 August 2004 16:06 To: [EMAIL PROTECTED] Subject: RE: Problem with SSL configuration Hi, This is how my server.xml looks like

Problem with SSL configuration

2004-08-05 Thread binoy.patrick
Hi, I have configured SSL with Tomcat, I get this error when starting Tomcat 04-Aug-2004 17:16:55 org.apache.commons.digester.Digester endElement SEVERE: End event threw exception java.lang.IllegalArgumentException: argument type mismatch at sun.reflect.NativeMethodAccessorImpl.invo

RE: Problem with SSL configuration

2004-08-05 Thread binoy.patrick
Hi, This is how my server.xml looks like Binoy -Original Message- From: Shapira, Yoav [mailto:[EMAIL PROTECTED] Sent: 05 August 2004 14:27 To: Tomcat Users List Subject: RE: Problem with SSL configuration Hi, You don't have to quote the whole stack trace ;)

RE: Problem with SSL configuration

2004-08-05 Thread Shapira, Yoav
ust 05, 2004 9:25 AM >To: [EMAIL PROTECTED] >Subject: Problem with SSL configuration > >Hi, > I have configured SSL with Tomcat, I get this error when starting >Tomcat > > 04-Aug-2004 17:16:55 org.apache.commons.digester.Digester endElement >SEVERE: End event threw exce

Re: Problem with SSL configuration

2004-08-05 Thread QM
On Thu, Aug 05, 2004 at 09:26:55AM -0400, Shapira, Yoav wrote: : You don't have to quote the whole stack trace ;) I dunno. I'd prefer people include the entire thing (up to the RootCause, at least)... just not in-line. ;) It's like lab reports in the days before word processing was cheap: "plea

Problem with SSL on Tomcat 4.1.29 & IE

2004-04-05 Thread Daneel Pang
Hi, I ran into a strange problem with SSL configuration in Tomcat 4.1.29. I had configured https://zeus:8443/ and tried it out with Lynx-ssl and it was able to access it, but when I tried to access it using IE (several versions), I keep getting the Cannot Find Server (The page cannot be

Problem with SSL on Tomcat 4.1.12 on win2k

2002-12-12 Thread talkingstone
I apologize in advance if this has been covered but while trying to follow some examples, SSL is not working properly. It hangs during execution. I'm sure you probably need more info but I'm too green to know what you might expect. Also, please give me a few tips on "searching the list archive".

Tomcat - Apache - AJP 13 strange Problem with SSL

2002-09-09 Thread Brandon Cruz
Hi, We are using Tomcat 3.2.4 connected to Apache 1.3.x. We have been using Apache to handle SSL, but want to use some JSP's in the secure section, so we need to forward those requests to Tomcat. We have set up a secure context in Tomcat for the virtual host. Whenever someone accesses a url wit

problem with SSL

2002-05-31 Thread jmorgan
Hello, My system is: Windows 2000 Server Tomcat 4.0.3 Java 2 SDK 1.4.0 Running on local intranet (for now) Problem: I've created a certificate keystore using the instructions at http://jakarta.apache.org/tomcat/tomcat-4.0-doc/ssl-howto.html. I've edited server.xml with my keystoreFile (keystor

problem with SSL

2002-02-05 Thread Daniel Thomas
Sorry if you have just recieved this, I am new!! help, I have been trying to set up the security option of tomcat but I can't work out what is going wrong here. I have set it up exactly how it says in the docs, but I seem to be having a problem with my policy. I have included the command line ar

Re: session maintenance problem with: ssl + cookies disabled

2001-04-20 Thread Wolle
Hello, jep that's is ab bug , see: http://nagoya.apache.org/bugzilla/show_bug.cgi?id=578 there is a workaround in it, and it will work with it, on the next release the Bug will be fixed. (3.2.2) Greetings, Michael [EMAIL PROTECTED] wrote: > When I disable cookies in browser and use ssl connect

session maintenance problem with: ssl + cookies disabled

2001-04-20 Thread maciejka
When I disable cookies in browser and use ssl connection (default https connector) session maintaining via URL rewriting does not work. One can try it with example from binary distribution: examples/servlet/SessionExample. Seems like a bug to me. Maciek Kaminski [EMAIL PROTECTED]