Fatal alert: certificate_unknown when test SSL with expired client cert

2007-10-22 Thread yuanyuan
Dear Sir/Madam, I am test SSL connection with Tomcat5.0.28 and j2sdk1.4.1_06. Below is the setting of my Tomcat for SSL: Connector port=8443 maxThreads=150 minSpareThreads=25 maxSpareThreads=75 enableLookups=true disableUploadTimeout=true

Re: Fatal alert: certificate_unknown when test SSL with expired client cert

2007-10-22 Thread Bill Barker
There isn't a problem here :). When Tomcat (or more correctly JSSE) sees an expired certificate, it just stops talking to the client, leaving the client to have to guess the reason. There are various patches in BZ to warn on expired certs (mostly against TC 5), but none that have been