Re: OCSP stapling in tomcat 7 with APR

2018-10-23 Thread Усманов Азат Анварович
. 23:28:14 Кому: users@tomcat.apache.org Тема: Re: OCSP stapling in tomcat 7 with APR -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Усманов, On 10/23/18 13:04, Усманов Азат Анварович wrote: > Hi everyone! I did manage to run ocsp check manually without a > proxy (some network issue)

Re: OCSP stapling in tomcat 7 with APR

2018-10-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Усманов, On 10/23/18 13:04, Усманов Азат Анварович wrote: > Hi everyone! I did manage to run ocsp check manually without a > proxy (some network issue),still no success with tomcat ocsp or > ssllabs however. > > openssl ocsp -no_nonce -header

Re: OCSP stapling in tomcat 7 with APR

2018-10-23 Thread Усманов Азат Анварович
dea how to identify which command tomcat sends to ocsp_responder ? От: Усманов Азат Анварович Отправлено: 19 октября 2018 г. 15:29:54 Кому: Tomcat Users List Тема: Re: OCSP stapling in tomcat 7 with APR Hi !turns out to be a proxy issue because once I modify the opens

Re: OCSP stapling in tomcat 7 with APR

2018-10-19 Thread Усманов Азат Анварович
Users List Тема: Re: OCSP stapling in tomcat 7 with APR On 17/10/18 15:02, Усманов Азат Анварович wrote: > Unfortunately, I still got the same issue with the slash > openssl ocsp -issuer /home/idis/authorities.crt -cert > /home/idis/STAR_ieml_ru.crt -text -url http://ocsp.comodoca.co

Re: OCSP stapling in tomcat 7 with APR

2018-10-17 Thread Mark Thomas
Wireshark or similar to do a network trace and see exactly what is going on there. Mark > > > > > От: Rainer Jung > Отправлено: 17 октября 2018 г. 16:41:27 > Кому: Tomcat Users List; Усманов Азат Анварович > Тема: Re: OCSP stapling in to

Re: OCSP stapling in tomcat 7 with APR

2018-10-17 Thread Усманов Азат Анварович
[root] ~# less index.html.7 > 0^C > ^A^A > index.html.7 (END) > any ideas what might be the problem? > > > ____________ > От: Усманов Азат Анварович > Отправлено: 15 октября 2018 г. 18:20:14 > Кому: users@tomcat.apache.org > Тема: Re: OCSP stapling

Re: OCSP stapling in tomcat 7 with APR

2018-10-17 Thread Rainer Jung
ARNING: unrecognized options: --enable-ocsp ____________ От: Mark Thomas Отправлено: 15 октября 2018 г. 15:01:58 Кому: users@tomcat.apache.org Тема: Re: OCSP stapling in tomcat 7 with APR On 14/10/18 18:45, Усманов Азат Анварович wrote: Hello everyone! I have an java 7 we

Re: OCSP stapling in tomcat 7 with APR

2018-10-17 Thread Усманов Азат Анварович
nized options: --enable-ocsp ____________ От: Mark Thomas Отправлено: 15 октября 2018 г. 15:01:58 Кому: users@tomcat.apache.org Тема: Re: OCSP stapling in tomcat 7 with APR On 14/10/18 18:45, Усманов Азат Анварович wrote: > Hello everyone! I have an java 7 web a

Re: OCSP stapling in tomcat 7 with APR

2018-10-15 Thread Coty Sutherland
g "-DHAVE_POLLSET_WAKEUP" to CFLAGS > > configure: creating ./config.status > > config.status: creating tcnative.pc > > config.status: creating Makefile > > config.status: executing default commands > > configure: WARNING: unrecognized options: --enable-ocsp &g

Re: OCSP stapling in tomcat 7 with APR

2018-10-15 Thread Mark Thomas
creating tcnative.pc > config.status: creating Makefile > config.status: executing default commands > configure: WARNING: unrecognized options: --enable-ocsp > > > > > От: Mark Thomas > Отправлено: 15 октября 2018 г. 15:01:58 &

Re: OCSP stapling in tomcat 7 with APR

2018-10-15 Thread Усманов Азат Анварович
__________ От: Mark Thomas Отправлено: 15 октября 2018 г. 15:01:58 Кому: users@tomcat.apache.org Тема: Re: OCSP stapling in tomcat 7 with APR On 14/10/18 18:45, Усманов Азат Анварович wrote: > Hello everyone! I have an java 7 web app running on tomcat 7 with > APR/tom

Re: OCSP stapling in tomcat 7 with APR

2018-10-15 Thread Mark Thomas
On 14/10/18 18:45, Усманов Азат Анварович wrote: > Hello everyone! I have an java 7 web app running on tomcat 7 with > APR/tomcat-native ON Linux .(OpenSSL 1.1.1) I would like to enable OCSP > stapling on tomcat > so that > When OCSP is enabled, a server will pre-fetch the OCSP response for its