Reporting a revoked certificate

2012-12-21 Thread Will Nordmeyer
At long last, I have tomcat configured, I have revoked certificates to test with... my question today... When I try using a revoked certificate, I get the lovely and meaningful page cannot be displayed. So it is properly denying access - but it doesn't provide appear to provide any other

Re: Reporting a revoked certificate

2012-12-21 Thread Daniel Mikusa
On Dec 21, 2012, at 7:35 AM, Will Nordmeyer wrote: At long last, I have tomcat configured, I have revoked certificates to test with… Nice! my question today... When I try using a revoked certificate, I get the lovely and meaningful page cannot be displayed. What browser are you using?

Re: Reporting a revoked certificate

2012-12-21 Thread Will Nordmeyer
On Fri, Dec 21, 2012 at 8:35 AM, Daniel Mikusa dmik...@vmware.com wrote: On Dec 21, 2012, at 7:35 AM, Will Nordmeyer wrote: At long last, I have tomcat configured, I have revoked certificates to test with… Nice! my question today... When I try using a revoked certificate, I get the

Re: Reporting a revoked certificate

2012-12-21 Thread Cédric Couralet
Thanks Dan - which access log should I look at? all of the tomcat logs don't show anything. I've got it configured with APR TCNATIVE Hello, I'm not sure you could get an error page. The ssl dialog takes place before any http communication. So I don't think tomcat can send an http response

Re: Reporting a revoked certificate

2012-12-21 Thread Cédric Couralet
Hello, I'm not sure you could get an error page. The ssl dialog takes place before any http communication. So I don't think tomcat can send an http response if the certificate is revoked. You could use openssl s_client to try and connect to your server to see what is returned from Tomcat

RE: Reporting a revoked certificate

2012-12-21 Thread Martin Gainty
things to check 1)are you implementing mod_ssl or any ssl modules in apache 2)if not mod_ssl are you implementing ssl in Tomcat bio-connector 3)if not mod_ssl are you implementing ssl in Tomcat nio-connector http://tomcat.apache.org/tomcat-7.0-doc/config/http.html#SSL_Support

Re: Reporting a revoked certificate

2012-12-21 Thread Mark Thomas
On 21/12/2012 13:35, Daniel Mikusa wrote: On Dec 21, 2012, at 7:35 AM, Will Nordmeyer wrote: At long last, I have tomcat configured, I have revoked certificates to test with… Nice! my question today... When I try using a revoked certificate, I get the lovely and meaningful page

Re: Reporting a revoked certificate

2012-12-21 Thread Mark Thomas
On 21/12/2012 14:51, Martin Gainty wrote: things to check Don't bother. This is yet more irrelevant nonsense from Martin. Mark 1)are you implementing mod_ssl or any ssl modules in apache 2)if not mod_ssl are you implementing ssl in Tomcat bio-connector 3)if not mod_ssl are you

Re: Reporting a revoked certificate

2012-12-21 Thread Daniel Mikusa
On Dec 21, 2012, at 9:28 AM, Will Nordmeyer wrote: On Fri, Dec 21, 2012 at 8:35 AM, Daniel Mikusa dmik...@vmware.com wrote: On Dec 21, 2012, at 7:35 AM, Will Nordmeyer wrote: At long last, I have tomcat configured, I have revoked certificates to test with… Nice! my question today...

Re: Reporting a revoked certificate

2012-12-21 Thread Will Nordmeyer
On Fri, Dec 21, 2012 at 10:30 AM, Daniel Mikusa dmik...@vmware.com wrote: On Dec 21, 2012, at 9:28 AM, Will Nordmeyer wrote: On Fri, Dec 21, 2012 at 8:35 AM, Daniel Mikusa dmik...@vmware.com wrote: On Dec 21, 2012, at 7:35 AM, Will Nordmeyer wrote: At long last, I have tomcat configured, I

Re: Tomcat 7.0.33 just stops without any errors...

2012-12-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Tony, On 12/20/12 6:16 PM, Tony Anecito wrote: Thanks I did a search through all folder for those types of files and none found. I am thinking it ran out of a resource. I will keep trying. Anything in the Window event log? - -chris

Re: jvmRoute with multiple AJP Connectors for one Engine

2012-12-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Robert, On 12/20/12 8:39 PM, Robert Anderson wrote: Now, the trick: VirtualHost *:80 ... Include conf.d/mod_jk.mounts ... /VirtualHost VirtualHost *:443 ... Include conf.d/mod_jk_sec.mounts ... /VirtualHost Oh, of course. It's still not

Re: Reporting a revoked certificate

2012-12-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cédric, On 12/21/12 9:34 AM, Cédric Couralet wrote: Thanks Dan - which access log should I look at? all of the tomcat logs don't show anything. I've got it configured with APR TCNATIVE Hello, I'm not sure you could get an error

Re: jvmRoute with multiple AJP Connectors for one Engine

2012-12-21 Thread Robert Anderson
Chris, This strategy is working well, we have some statistics and controls that are easier to implement and maintain if we keep separate connectors. Currently, we have only two Tomcats, each one with 40 applications (focus in justice, virtual processes) deployed on it and processing 160 req/sec.

Tomcat j_security_check skips authentication after timeout?

2012-12-21 Thread rop
I got the responsibility of maintaining a legacy web-application running on Tomcat 5.5.36 and using the *j_security_check* feature for user-authentication. One problem scenario I am looking into: When you first start the browser and logon to the application, everything works OK The

Re: Tomcat j_security_check skips authentication after timeout?

2012-12-21 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Rop, On 12/21/12 4:01 PM, rop wrote: I got the responsibility of maintaining a legacy web-application running on Tomcat 5.5.36 and using the *j_security_check* feature for user-authentication. Obligatory warning: Tomcat 5.5.x is no longer