Re: SSL on Tomcat5

2011-05-11 Thread Goo Sam Kong
Hi, If you use APR, the private key certificate should be in PEM format as documented in http://tomcat.apache.org/tomcat-5.5-doc/apr.html#HTTPS *SSLCertificateFile* Name of the file that contains the server certificate. The format is PEM-encoded. SSLCertificateKeyFile Name of the file that

Re: Error Tomcat CLIENT-CERT autentication.

2011-01-17 Thread Goo Sam Kong
Hi Angel, I encountered the same problem as you with Tomcat 5.5.27, so I upgraded to latest Tomcat to get rid of the certification error. https://issues.apache.org/bugzilla/show_bug.cgi?id=37869 is bug report on certification error. Thank you. On 17 January 2011 22:14, amcereijo cereijo

Re: Tomcat7 APR Connectors Config: Unable to load certificate key conf/key1cert.pem

2010-11-24 Thread Goo Sam Kong
Hi Scott, My working HTTPS connector using APR settings as below: Connector port=8443 protocol=org.apache.coyote.http11.Http11AprProtocol SSLEnabled=true maxThreads=150 scheme=https secure=true

Re: Tomcat7 APR Connectors Config: Unable to load certificate key conf/key1cert.pem

2010-11-24 Thread Goo Sam Kong
and Goo Sam Kong I followed Goo Sam Kong 's config still have errors: Loaded APR based Apache Tomcat Native library 1.1.20. 2010-11-24 17:38:43 org.apache.catalina.core.AprLifecycleListener init 信息: APR capabilities: IPv6 [true], sendfile [true], accept filters [false], random [true]. 2010

Re: Client not able with perform client-cert authentication with Tomcat 6.0.29 on APR

2010-11-16 Thread Goo Sam Kong
SSLCipherSuite=AES128-SHA:DES-CBC3-SHA SSLCACertificateFile=C:\usr-files\client-cert-ca.crt / On 13 November 2010 00:38, Mark Thomas ma...@apache.org wrote: On 12/11/2010 16:27, Goo Sam Kong wrote: Hi I am running Tomcat 6.0.29 with JDK 1.6.0_22 on Windows XP. APR/native connector

Client not able with perform client-cert authentication with Tomcat 6.0.29 on APR

2010-11-12 Thread Goo Sam Kong
Hi I am running Tomcat 6.0.29 with JDK 1.6.0_22 on Windows XP. I changed server.xml as below. ?xml version=1.0 encoding=UTF-8? Server port=8005 shutdown=SHUTDOWN !--APR library loader. Documentation at /docs/apr.html -- Listener SSLEngine=on

Re: Tomcat crashed after servicing too many HTTPS connection

2010-07-08 Thread Goo Sam Kong
chuck.caldar...@unisys.comwrote: From: Goo Sam Kong [mailto:skgo...@gmail.com] Subject: Re: Tomcat crashed after servicing too many HTTPS connection I did the same test on Tomcat 5.5.16 with JDK 1.5.0 update 7 on Windows XP Why are you mucking around with versions of Tomcat that are over four

Tomcat crashed after servicing too many HTTPS connection

2010-07-06 Thread Goo Sam Kong
I am using Tomcat 5.5.15 with JDK 1.5.0 update 7 on RedHat Enterprise. I tested my web application by refreshing a page many times, the Tomcat server crashed and thrown exception below: Jul 6, 2010 11:21:38 AM org.apache.tomcat.util.net.PoolTcpEndpoint acceptSocket SEVERE: Endpoint [SSL:

Re: Tomcat crashed after servicing too many HTTPS connection

2010-07-06 Thread Goo Sam Kong
:48, Goo Sam Kong wrote: I am using Tomcat 5.5.15 with JDK 1.5.0 update 7 on RedHat Enterprise. I tested my web application by refreshing a page many times, the Tomcat server crashed and thrown exception below: How many times? Was your test automated? What did you expect would happen

Re: Convert a certificate from IIS (.PFX) into a (.keystore) for Apache Tomcat v 6.x

2010-06-23 Thread Goo Sam Kong
Hi Ian, Take a look on this http://tp.its.yale.edu/pipermail/cas/2005-July/001337.html. Hope it helps. On 24 June 2010 06:41, Konstantin Kolinko knst.koli...@gmail.com wrote: 2010/6/24 Mark Eggers its_toas...@yahoo.com: Google is your friend?

Logging Requirement in Tomcat 5.5.16

2010-04-21 Thread Goo Sam Kong
Hi, I am using Log4j logging in Tomcat 5.5.16 with JDK 1.5.0 update 7 on RedHat Linux server. I followed the instructions on http://tomcat.apache.org/tomcat-5.5-doc/logging.html to copy the commons-logging-1.0.4.jar and log4j.jar into $CATALINA_HOME/common/lib directory. and created

Re: Logging Requirement in Tomcat 5.5.16

2010-04-21 Thread Goo Sam Kong
I want catalina.out to be rotate daily but Tomcat give me extra files (catalina.out.1.gz, catalina.out.2.gz...catalina.out.30.gz). I don't those extra files. Any chance to disable that? On 21 April 2010 16:26, Pid p...@pidster.com wrote: On 21/04/2010 09:07, Goo Sam Kong wrote: Hi, I am

Re: Logging Requirement in Tomcat 5.5.16

2010-04-21 Thread Goo Sam Kong
rotation anywhere. On 21 April 2010 16:32, Goo Sam Kong skgo...@gmail.com wrote: I want catalina.out to be rotate daily but Tomcat give me extra files (catalina.out.1.gz, catalina.out.2.gz...catalina.out.30.gz). I don't those extra files. Any chance to disable that? On 21 April 2010 16:26, Pid

Re: Logging Requirement in Tomcat 5.5.16

2010-04-21 Thread Goo Sam Kong
...@pidster.com wrote: On 21/04/2010 09:49, Pid wrote: On 21/04/2010 09:35, Goo Sam Kong wrote: Oops, type too fast. I want catalina.out to be rotate daily but Tomcat give me extra files (catalina.out.1.gz, catalina.out.2.gz...catalina. out.30.gz). I don't want those extra files. Any chance to disable

Re: Logging Requirement in Tomcat 5.5.16

2010-04-21 Thread Goo Sam Kong
Thanks Andre, I saw there is a script doing zip in /etc. I am new to Linux, :-). On 21 April 2010 17:45, André Warnier a...@ice-sa.com wrote: Goo Sam Kong wrote: Hi Pid, My answer below. I saw the same file names in another server (not implement log4j yet), that server is running

Re: Having difficulty using keytool -genkey to get a key with blank OU (instead of unknown)

2010-04-08 Thread Goo Sam Kong
Hi Eric, Try to put the subject DN (with OU equal to blank) in -dname field as below. keytool -genkey -keystore keystoreFile -storepass password -alias keyAlias -dname CN=your cn,OU=,O=your company,C=SG On 9 April 2010 06:51, Eric DuToit eric.dut...@gmail.com wrote: I need to generate a

Re: smartcards for tomcat webapps

2010-04-07 Thread Goo Sam Kong
-constraint /security-constraint From: Goo Sam Kong skgo...@gmail.com To: Tomcat Users List users@tomcat.apache.org Sent: Tue, April 6, 2010 10:21:49 PM Subject: Re: smartcards for tomcat webapps On 6 April 2010 20:39,  dockeryjava...@yahoo.com wrote

Re: smartcards for tomcat webapps

2010-04-06 Thread Goo Sam Kong
On 6 April 2010 20:39, dockeryjava...@yahoo.com wrote: Anyone using smartcards for auth? If so, have specific example code excerpt and server.xml? Minimum configuration changes required for HTTPS connector in server.xml is to add attributes below and amend value of clientAuth attribute from

Re: can't seem to migrate this app over to a new server

2010-03-24 Thread Goo Sam Kong
Hi John, You need to enable HTTPS connector, refer to SSL Support section in http://tomcat.apache.org/tomcat-5.5-doc/config/http.html to enable SSL in server.xml. On 24 March 2010 14:22, joon yoo jyoo1...@gmail.com wrote: We're in the process of extricating ourselves from a host who developed

Re: Force Tomcat 5.5.16 to close SSL session upon every request

2010-03-23 Thread Goo Sam Kong
Hi Ben, Do you know why Tomcat take some time to close the connection? Is it predictable? My Java client is authenticate with Tomcat server using USB based security token through client certificate authentication. Even though I removed the token, Java client still able to run until some times,

Re: Force Tomcat 5.5.16 to close SSL session upon every request

2010-03-23 Thread Goo Sam Kong
Thank you, Mark On 23 March 2010 16:31, Mark Thomas ma...@apache.org wrote: On 23/03/2010 06:58, Goo Sam Kong wrote: Hi Ben, Do you know why Tomcat take some time to close the connection? Is it predictable? Tomcat does close the connection. My Java client is authenticate with Tomcat

Force Tomcat 5.5.16 to close SSL session upon every request

2010-03-22 Thread Goo Sam Kong
Hi Is it possible Tomcat close SSL session upon every HTTP request? I am running Tomcat 5.5.16 on JDK 1.5.0 update 7 on RedHat Enterprise. Thank you. Regards, SamKong Goo - To unsubscribe, e-mail:

Re: How to set SSL session timeout in Tomcat 5.5.16

2010-03-17 Thread Goo Sam Kong
Thank you very much Mark, I will try it tomorrow. On 17 March 2010 16:40, Mark Thomas ma...@apache.org wrote: On 17/03/2010 00:49, Goo Sam Kong wrote: May I know how to set the SSL session timeout in Tomcat 5.5.16. I am running JDK 1.5.0 update 7 on RedHat Enterprise. 1. Upgrade

Re: How to set SSL session timeout in Tomcat 5.5.16

2010-03-17 Thread Goo Sam Kong
. Thank you. On 17 March 2010 17:32, Goo Sam Kong skgo...@gmail.com wrote: Thank you very much Mark, I will try it tomorrow. On 17 March 2010 16:40, Mark Thomas ma...@apache.org wrote: On 17/03/2010 00:49, Goo Sam Kong wrote: May I know how to set the SSL session timeout in Tomcat 5.5.16. I am

Re: How to set SSL session timeout in Tomcat 5.5.16

2010-03-17 Thread Goo Sam Kong
Hi Chuck, OIC, so when the code will be fixed? On 18 March 2010 11:07, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Goo Sam Kong [mailto:skgo...@gmail.com] Subject: Re: How to set SSL session timeout in Tomcat 5.5.16 I noticed there is a error in Tomcat documentation (http

Re: How to set SSL session timeout in Tomcat 5.5.16

2010-03-17 Thread Goo Sam Kong
Hi Mark, Will apache.org correct the Tomcat documentation or fix the code? Thank you. On 18 March 2010 11:16, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Goo Sam Kong [mailto:skgo...@gmail.com] Subject: Re: How to set SSL session timeout in Tomcat 5.5.16 OIC, so when

How to set SSL session timeout in Tomcat 5.5.16

2010-03-16 Thread Goo Sam Kong
May I know how to set the SSL session timeout in Tomcat 5.5.16. I am running JDK 1.5.0 update 7 on RedHat Enterprise. Thank you. Regards, SamKong Goo - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional

Re: How to set SSL session timeout in Tomcat 5.5.16

2010-03-16 Thread Goo Sam Kong
, Charles R chuck.caldar...@unisys.com wrote: From: Goo Sam Kong [mailto:skgo...@gmail.com] Subject: How to set SSL session timeout in Tomcat 5.5.16 May I know how to set the SSL session timeout in Tomcat 5.5.16. The session timeout value is independent of the session security, and set

Re: How to set SSL session timeout in Tomcat 5.5.16

2010-03-16 Thread Goo Sam Kong
how to do/configure to invalidate SSL session? Thank you. Regards, SamKong Goo On 17 March 2010 10:30, Caldarale, Charles R chuck.caldar...@unisys.com wrote: From: Goo Sam Kong [mailto:skgo...@gmail.com] Subject: Re: How to set SSL session timeout in Tomcat 5.5.16 Can I invalidate the SSL