Re: [maybe OT] /dev/urandom [was : Re: Tomcat 8.5.23 Initialization PRNG/SSL]

2017-10-27 Thread Bob Hall
> On Friday, October 27, 2017, 2:32:50 PM PDT, André Warnier (tomcat) > wrote: >  >  > There seem to be a recrudescence of interventions on this list about >SSL/HTTPS, and > associated discussions about the usage of various randomness sources.> I > found this article interesting :> https:/

[maybe OT] /dev/urandom [was : Re: Tomcat 8.5.23 Initialization PRNG/SSL]

2017-10-27 Thread tomcat
There seem to be a recrudescence of interventions on this list about SSL/HTTPS, and associated discussions about the usage of various randomness sources. I found this article interesting : https://www.2uo.de/myths-about-urandom/ ---

Re: Tomcat 8.5.23 Initialization PRNG/SSL

2017-10-27 Thread tomcat
On 27.10.2017 16:55, George S. wrote: I'm seeing some strange ssl errors. They're not reproducible consistently, and I think they're because the PRNG is initializing after the Connector. Here's some log output: 26-Oct-2017 17:04:08.380 INFO [main] org.apache.coyote.AbstractProtocol.start Star

Re: Am I reinventing the wheel to get letsencrypt certs for Tomcat

2017-10-27 Thread Don Flinn
Hi Johan, Thank you for the information. A few things, I'm running Tomcat on a Windows machine as a windows server. I'm not running as root, I was talking about the ROOT directory under Tomcat's webapps directory. So that when letsencrpt logs into my domain/.well-known/acme-challenge, which is

Tomcat 8.5.23 Initialization PRNG/SSL

2017-10-27 Thread George S.
I'm seeing some strange ssl errors. They're not reproducible consistently, and I think they're because the PRNG is initializing after the Connector. Here's some log output: 26-Oct-2017 17:04:08.380 INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler ["http-nio-8080"]

Re: Am I reinventing the wheel to get letsencrypt certs for Tomcat

2017-10-27 Thread Johan Compagner
On 27 October 2017 at 15:05, Don Flinn wrote: > Hi Andre, > > I have looked and it may be my ignorance but I didn't find any that seemed > to fit. I'll look more closely at the available letsencrypt clients. > > With letsencrypt you first have to authenticate, i.e. show you own the > site, by le

Re: Am I reinventing the wheel to get letsencrypt certs for Tomcat

2017-10-27 Thread Don Flinn
Hi Markus I'm not familiar with the inner workings of Tomcat, but I just looked at the source code distro and it seems to contain java programs. So maybe my little effort may be of use. Don On Fri, Oct 27, 2017 at 10:11 AM, i...@flyingfischer.ch < i...@flyingfischer.ch> wrote: > Am 27.10.2017

Re: Am I reinventing the wheel to get letsencrypt certs for Tomcat

2017-10-27 Thread i...@flyingfischer.ch
Am 27.10.2017 um 15:29 schrieb André Warnier (tomcat): > On 27.10.2017 15:05, Don Flinn wrote: >> Hi Andre, >> >> I have looked and it may be my ignorance but I didn't find any that >> seemed >> to fit.  I'll look more closely at the available letsencrypt clients. > > It is certainly more my own ig

Re: Am I reinventing the wheel to get letsencrypt certs for Tomcat

2017-10-27 Thread tomcat
On 27.10.2017 15:05, Don Flinn wrote: Hi Andre, I have looked and it may be my ignorance but I didn't find any that seemed to fit. I'll look more closely at the available letsencrypt clients. It is certainly more my own ignorance, rather than yours. I was only pointing out the obvious, since

Re: Am I reinventing the wheel to get letsencrypt certs for Tomcat

2017-10-27 Thread Don Flinn
Hi Andre, I have looked and it may be my ignorance but I didn't find any that seemed to fit. I'll look more closely at the available letsencrypt clients. With letsencrypt you first have to authenticate, i.e. show you own the site, by letsencrypt logging into your site, e.g. Tomcat and checking a

Re: Am I reinventing the wheel to get letsencrypt certs for Tomcat

2017-10-27 Thread tomcat
On 27.10.2017 13:22, Don Flinn wrote: I am writing a Java program to get a certificate from letsencrypt put it in a keystore and ftp it to my Tomcat 9 or any version running on Amazon Web Services or any place you can fip to. I intended to contribute it to Tomcat users. It's about 80% done. I a

Re: Am I reinventing the wheel to get letsencrypt certs for Tomcat

2017-10-27 Thread Martynas Jusevičius
I think Tomcat 9 suppors PEM files directly, but if you want to use PKCS12, this might help: https://github.com/AtomGraph/letsencrypt-tomcat/blob/master/entrypoint.sh#L33 On Fri, Oct 27, 2017 at 1:22 PM, Don Flinn wrote: > I am writing a Java program to get a certificate from letsencrypt put it

Am I reinventing the wheel to get letsencrypt certs for Tomcat

2017-10-27 Thread Don Flinn
I am writing a Java program to get a certificate from letsencrypt put it in a keystore and ftp it to my Tomcat 9 or any version running on Amazon Web Services or any place you can fip to. I intended to contribute it to Tomcat users. It's about 80% done. I am able to get the letsencrypt certificat