RE: SSL Certificate Help

2012-11-07 Thread Alissa Schneider
--Original Message- From: Igor Cicimov [mailto:icici...@gmail.com] Sent: Wednesday, November 07, 2012 4:37 PM To: Tomcat Users List Subject: Re: SSL Certificate Help Sounds like your browser is still caching your old one. If Firefox then go to Tools->Options->Advanced->View Certificates butt

Re: SSL Certificate Help

2012-11-07 Thread Igor Cicimov
On Thu, Nov 8, 2012 at 8:32 AM, Alissa Schneider wrote: > Yes, I have...many, many times. But good question! > > -Original Message- > From: James Lampert [mailto:jam...@touchtonecorp.com] > Sent: Wednesday, November 07, 2012 3:28 PM > To: Tomcat Users List > Subject

RE: SSL Certificate Help

2012-11-07 Thread Alissa Schneider
Yes, I have...many, many times. But good question! -Original Message- From: James Lampert [mailto:jam...@touchtonecorp.com] Sent: Wednesday, November 07, 2012 3:28 PM To: Tomcat Users List Subject: Re: SSL Certificate Help Alissa Schneider wrote: > Still, when I visit https://localh

Re: SSL Certificate Help

2012-11-07 Thread James Lampert
Alissa Schneider wrote: Still, when I visit https://localhost:8443, the browser throws a certificate warning. When I click on the certificate warning and view certificate, it displays information on my self-signed certificate (that I've deleted). I think if I could figure out how to make Tomcat

SSL Certificate Help

2012-11-07 Thread Alissa Schneider
Hi - I'm a novice Tomcat user. I've only used the tool to support BusinessObjects. I recently was asked to set up SSL for the first time. Initially I created my own self-signed certificate and was able to get everything working fine, although I would get the 'certificate warning' error message

Re: How to check whether a SSL certificate has been correctly installed

2012-10-09 Thread Tom Anthony
Great information Christopher, thank you for your help. -- View this message in context: http://tomcat.10.n6.nabble.com/How-to-check-whether-a-SSL-certificate-has-been-correctly-installed-tp4987669p4987692.html Sent from the Tomcat - User mailing list archive at Nabble.com

RE: How to check whether a SSL certificate has been correctly installed

2012-10-09 Thread Tom Anthony
Thank you so much, I wanted to double check. -- View this message in context: http://tomcat.10.n6.nabble.com/How-to-check-whether-a-SSL-certificate-has-been-correctly-installed-tp4987669p4987690.html Sent from the Tomcat - User mailing list archive at Nabble.com

Re: How to check whether a SSL certificate has been correctly installed

2012-10-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tom, On 10/8/12 5:35 AM, Tom Anthony wrote: > I just installed a third party certificate on Tomcat and was > wondering whether there was a way to check with confidence that the > ceritiftcae has been installed correctly on the server and that all > co

RE: How to check whether a SSL certificate has been correctly installed

2012-10-08 Thread Adamus, Steven J.
rypted. Steve -Original Message- From: users-return-237053-STEVEN.J.ADAMUS=saic@tomcat.apache.org [mailto:users-return-237053-STEVEN.J.ADAMUS=saic@tomcat.apache.org] On Behalf Of Tom Anthony Sent: Monday, October 08, 2012 2:36 AM To: users@tomcat.apache.org Subject: How to check whether a

How to check whether a SSL certificate has been correctly installed

2012-10-08 Thread Tom Anthony
message in context: http://tomcat.10.n6.nabble.com/How-to-check-whether-a-SSL-certificate-has-been-correctly-installed-tp4987669.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail: users

RE: Need assistance for 2048 Extended EV SSL certificate installation

2012-06-19 Thread Martin Gainty
@bt.com To: users@tomcat.apache.org Date: Tue, 19 Jun 2012 17:26:04 +0100 Subject: Need assistance for 2048 Extended EV SSL certificate installation Hi All, I am using following tomcat version root@REFERRAL-SERVER1# ./version.shUsing CATALINA_BASE: /usr/local/apache-tomcat-6.0.24/Using CATALINA_

Re: Tomcat unable to validate SSL certificate authority

2012-05-03 Thread Andy Ee
Hi, Thanks for all the inputs. I found that another war file in webapps/ has set environment to point to it's own keystore, thus it overwrites the JAVA_OPTS somehow. Now that I have imported the certificates into that "keystore" as well, everything works! Regards, Andii --- André Warnier wro

RE: Tomcat unable to validate SSL certificate authority

2012-05-03 Thread Caldarale, Charles R
> From: Andy Ee [mailto:an...@singnet.com.sg] > Subject: Tomcat unable to validate SSL certificate authority > I received the following error in the catalina.out log. "Logging" to stdout is bad practice for anyone's webapp. > Therefore I am suspecting that Tomcat is

Re: Tomcat unable to validate SSL certificate authority

2012-05-03 Thread André Warnier
Andy Ee wrote: Dear all, I am stuck with this problem for over a month now, and I have tried all ways but to no avail. My Tomcat 6.0.32 is running in Solaris 10 and the JDK version is 1.6.0_21. I deployed a java program in Tomcat webapps/ which will post some results to a web server via a HTTP

Tomcat unable to validate SSL certificate authority

2012-05-03 Thread Andy Ee
Dear all, I am stuck with this problem for over a month now, and I have tried all ways but to no avail. My Tomcat 6.0.32 is running in Solaris 10 and the JDK version is 1.6.0_21. I deployed a java program in Tomcat webapps/ which will post some results to a web server via a HTTPS url. I receiv

RE: SSL Certificate Update Not Reflected on the Website

2012-01-09 Thread Conway Liu
List Subject: Re: SSL Certificate Update Not Reflected on the Website On 09/01/2012 10:44, Conway Liu wrote: > Hi Pid, > > I tried different browsers, and tried different computers. > > What command line tool are you talking about? Something like: curl or openssl p &g

Re: SSL Certificate Update Not Reflected on the Website

2012-01-09 Thread Pid
Pid * [mailto:p...@pidster.com] > Sent: Monday, 9 January 2012 11:37 p.m. > To: Tomcat Users List > Subject: Re: SSL Certificate Update Not Reflected on the Website > > On 9 Jan 2012, at 10:20, Conway Liu wrote: > >> Hi, >> >> We used to use Thawte for our SSL certifi

Re: SSL Certificate Update Not Reflected on the Website

2012-01-09 Thread Ognjen Blagojevic
Conway, On 9.1.2012 11:19, Conway Liu wrote: Does anyone have any suggestion where might be wrong? Do you have anything between your browser and Tomcat? Apache HTTPd, perhaps, or some kind of load balancer with SSL termination? -Ognjen --

RE: SSL Certificate Update Not Reflected on the Website

2012-01-09 Thread Conway Liu
Hi Pid, I tried different browsers, and tried different computers. What command line tool are you talking about? Thanks Conway -Original Message- From: Pid * [mailto:p...@pidster.com] Sent: Monday, 9 January 2012 11:37 p.m. To: Tomcat Users List Subject: Re: SSL Certificate Update Not

Re: SSL Certificate Update Not Reflected on the Website

2012-01-09 Thread Pid *
On 9 Jan 2012, at 10:20, Conway Liu wrote: > Hi, > > We used to use Thawte for our SSL certificate. Today I installed new SSL > certificate issued by VeriSign and there were no errors. The primary and > secondary intermediate CAs both imported into the keystore file properly, >

SSL Certificate Update Not Reflected on the Website

2012-01-09 Thread Conway Liu
Hi, We used to use Thawte for our SSL certificate. Today I installed new SSL certificate issued by VeriSign and there were no errors. The primary and secondary intermediate CAs both imported into the keystore file properly, and then the SSL issued by VeriSign imported as well. I updated the

Re: Creating CSR for Purchasing SSL Certificate from VeriSign

2011-12-24 Thread Mark Eggers
- Original Message - > From: Pid > To: Tomcat Users List > Cc: > Sent: Saturday, December 24, 2011 1:42 AM > Subject: Re: Creating CSR for Purchasing SSL Certificate from VeriSign > > On 23/12/2011 22:42, Mark Eggers wrote: >> - Original Message -

Re: Creating CSR for Purchasing SSL Certificate from VeriSign

2011-12-24 Thread Pid
On 23/12/2011 22:42, Mark Eggers wrote: > - Original Message - > >> From: Christopher Schultz >> To: Tomcat Users List >> Cc: >> Sent: Friday, December 23, 2011 2:08 PM >> Subject: Re: Creating CSR for Purchasing SSL Certificate from VeriSign

Re: Creating CSR for Purchasing SSL Certificate from VeriSign

2011-12-23 Thread Mark Eggers
- Original Message - > From: Christopher Schultz > To: Tomcat Users List > Cc: > Sent: Friday, December 23, 2011 2:08 PM > Subject: Re: Creating CSR for Purchasing SSL Certificate from VeriSign > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Co

Re: Creating CSR for Purchasing SSL Certificate from VeriSign

2011-12-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Conway, On 12/23/11 4:13 PM, Conway Liu wrote: > Also, if we later add another Tomcat site (with a different domain > name) on the same Windows 2008 R2 server, do we have to generate > another CSR to purchase another SSL certificate? Apa

RE: Creating CSR for Purchasing SSL Certificate from VeriSign

2011-12-23 Thread Conway Liu
Thank you Piotr, I will have a read of the link you provided. Merry Christmas Conway -Original Message- From: Piotr Pawłowski [mailto:piotr.pawlow...@goyello.com] Sent: Saturday, 24 December 2011 10:27 a.m. To: Tomcat Users List Subject: RE: Creating CSR for Purchasing SSL Certificate

RE: Creating CSR for Purchasing SSL Certificate from VeriSign

2011-12-23 Thread Piotr Pawłowski
le you can take following blog entry: http://linuxadmin.com.pl/index.php/tomcat-and-ssl-certificates-small-how-to/ CSR is generated per certificate, so if you have another ssl certificate for sure you will need to create another csr. Best Regards -- Piotr Pawlowski GOYELLO System Adm

Creating CSR for Purchasing SSL Certificate from VeriSign

2011-12-23 Thread Conway Liu
Hi, We are running a Tomcat website on Windows 2008 R2. The SSL certificate for this website has expired. Instead of renewing the SSL certificate from the current SSL provider, we want to buy new SSL certificate from VeriSign. We are aware that we need to first generate a Certificate

Re: Problems with installing ssl certificate under tomcat

2011-07-16 Thread Piotr Pawlowski
Christopher and All, I am really sorry for not replying. I've coped with my problem before I went to holidays. Solution, which helped me to correctly install delivered certificate, it's key and CA chain, can be found under following URL: http://linuxadmin.com.pl/index.php/tomcat-and-ssl-certificat

RE: SSL Certificate formats, requirements for import into existing keystore

2011-07-07 Thread Peterson, Tommy
: Thursday, July 07, 2011 1:46 AM To: Tomcat Users List; users@tomcat.apache.org Subject: Re: SSL Certificate formats, requirements for import into existing keystore "Peterson, Tommy" schrieb: I have a keystore for an application that runs on Tomcat. People here introduced a load balancer

Re: SSL Certificate formats, requirements for import into existing keystore

2011-07-06 Thread Felix Schumacher
"Peterson, Tommy" schrieb: I have a keystore for an application that runs on Tomcat. People here introduced a load balancer (LB) into the mix for this same application and therefore I have to use keytool to import the LB's certificate into the existing keystore. However, the key and the cer

Re: SSL Certificate formats, requirements for import into existing keystore

2011-07-06 Thread Felix Schumacher
Hi Marvin, Marvin Addison schrieb: >> There is some "junk" ("bag attributes")n the file that I don't' >understand. I am used to just seeing "-BEGIN CERTIFICATE- >"END CERTIFICATE- "" ""-BEGIN RSA PRIVATE KEY- >"-END RSA PRIVATE KEY- " > >As far as I know, keytool

Re: SSL Certificate formats, requirements for import into existing keystore

2011-07-06 Thread Marvin Addison
> There is some "junk" ("bag attributes")n the file that I don't' understand. I > am used to just seeing "-BEGIN CERTIFICATE- "END CERTIFICATE- > "" ""-BEGIN RSA PRIVATE KEY- "-END RSA PRIVATE KEY- " As far as I know, keytool can only import certificates in PKCS8

SSL Certificate formats, requirements for import into existing keystore

2011-07-06 Thread Peterson, Tommy
I have a keystore for an application that runs on Tomcat. People here introduced a load balancer (LB) into the mix for this same application and therefore I have to use keytool to import the LB's certificate into the existing keystore. However, the key and the cert are in one file. According to

RE: Problem with SSL certificate

2011-06-30 Thread D'Anna, Rich (PHH)
ted Tomcat everything works as expected. Thanks again for all your help. -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Wednesday, June 29, 2011 2:22 PM To: Tomcat Users List Subject: RE: Problem with SSL certificate > From: D&#x

Re: Problem with SSL certificate

2011-06-29 Thread Rainer Frey
On 29.06.2011, at 20:09, D'Anna, Rich (PHH) wrote: > I'm guessing > we are using the native APR connector based on the configuration we > selected for the server.xml. > > When I looked in the logs I did find this entry: > > Jun 29, 2011 1:56:31 PM org.apache.catalina.core.AprLifecycleListener >

RE: Problem with SSL certificate

2011-06-29 Thread Caldarale, Charles R
> From: D'Anna, Rich (PHH) [mailto:Rich.D'a...@phh.com] > Subject: RE: Problem with SSL certificate > I'm guessing we are using the native APR connector based > on the configuration we selected for the server.xml. Better to say you're trying to use it, si

RE: Problem with SSL certificate

2011-06-29 Thread D'Anna, Rich (PHH)
e should try installing? -Original Message- From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: Wednesday, June 29, 2011 1:53 PM To: Tomcat Users List Subject: RE: Problem with SSL certificate > From: D'Anna, Rich (PHH) [mailto:Rich.D'a...@phh.com] > Sub

RE: Problem with SSL certificate

2011-06-29 Thread Caldarale, Charles R
> From: D'Anna, Rich (PHH) [mailto:Rich.D'a...@phh.com] > Subject: Problem with SSL certificate > Just a quick run down of the version and specs: Thanks for that; many often forget to provide this basic information. > Apache Tomcat 6.0.18 > JVM version Sun 1.6.0_13-b

Problem with SSL certificate

2011-06-29 Thread D'Anna, Rich (PHH)
Just a quick run down of the version and specs: Apache Tomcat 6.0.18 JVM version Sun 1.6.0_13-b03 Windows Server 2003 We recently stood up a Tomcat instance to enable SSL for a new app. Everything works perfectly fine with one exception. When you hit the url for the application it comes up wit

Re: Problems with installing ssl certificate under tomcat

2011-06-29 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Piotr, On 6/29/2011 3:11 AM, Piotr Pawlowski wrote: > My server.conf for ssl connector looks as follows: > > *maxThreads="150" scheme="https" secure="true" >clientAuth="false" sslProtocol="TLS" keyAlias="someAlias"

Re: Problems with installing ssl certificate under tomcat

2011-06-29 Thread Piotr Pawlowski
Hello, My server.conf for ssl connector looks as follows: * * All files connected with SSL , including key store file, are located in * /etc/tomcat/ssl/* directory. "sec_error_bad_signature" is visible when I enter website from web browser (FireFox). Thank you in advance for a help. Best R

Re: Problems with installing ssl certificate under tomcat

2011-06-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Piotr, On 6/28/2011 9:28 AM, Piotr Pawlowski wrote: > Since yesterday I am trying to install to install certificate under Tomcat > (7.0.16) without luck. Which ? SSL configuration is different when using APR's SSL engine. > I received from my client

Problems with installing ssl certificate under tomcat

2011-06-28 Thread Piotr Pawlowski
Hello all, Since yesterday I am trying to install to install certificate under Tomcat (7.0.16) without luck. I received from my client three files: wildcard certificate (cert.crt) , key file (cert.key) and something what is not quite clear for me - cabundle.pem . I've successfully used some java s

Re: Need help with SSL Certificate install on Tomcat 6.0.29 APR.

2011-04-20 Thread Jin H
Common Name must be the hostname for the ssl certificate. The rest of the questions are straightforward. Send the CSR to the ssl vendor and they will send back the ssl certificate. Copy the .key and .crt file to the root of tomcat folder. Change the server.xml to point to the two files.

Re: Need help with SSL Certificate install on Tomcat 6.0.29 APR.

2011-04-19 Thread Crypto Sal
f #2, unless #2 cause you extra money or you don't mind doing a little 'work'. :-P --Crypto.Sal On 04/19/2011 05:54 PM, Jin H wrote: Hi. We are a school running Tomcat 6.0.29 for Windows server 2003 with APR. I currently have an SSL certificate installed. I'm trying

Re: Need help with SSL Certificate install on Tomcat 6.0.29 APR.

2011-04-19 Thread Igor Cicimov
So why did you enter password when you created the csr if you dont want it? On Apr 20, 2011 7:54 AM, "Jin H" wrote: Hi. We are a school running Tomcat 6.0.29 for Windows server 2003 with APR. I currently have an SSL certificate installed. I'm trying to update it with

Need help with SSL Certificate install on Tomcat 6.0.29 APR.

2011-04-19 Thread Jin H
Hi. We are a school running Tomcat 6.0.29 for Windows server 2003 with APR. I currently have an SSL certificate installed. I'm trying to update it with the renewed SSL certificate but I'm having no luck. Here are the commands I used to create the CSR. in the jdk1.6.0_17\bin fol

RE: Nio Connector and self signed SSL certificate giving "No client certificate chain in this request"

2011-02-06 Thread Parag Thakur
Christopher, Thanks for the help. I will log this in Bugzilla shortly. -parag -Original Message- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: Saturday, February 05, 2011 4:06 AM To: Tomcat Users List Subject: Re: Nio Connector and self signed SSL certificate

RE: Nio Connector and self signed SSL certificate giving "No client certificate chain in this request"

2011-02-06 Thread Parag Thakur
. Regards, Parag -Original Message- From: Brett Delle Grazie [mailto:brett.dellegra...@gmail.com] Sent: Saturday, February 05, 2011 1:30 PM To: Tomcat Users List Subject: Re: Nio Connector and self signed SSL certificate giving "No client certificate chain in this request"

Re: Nio Connector and self signed SSL certificate giving "No client certificate chain in this request"

2011-02-05 Thread Brett Delle Grazie
Hi, On 4 February 2011 22:36, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Parag, > > On 2/4/2011 5:04 AM, Parag Thakur wrote: > >> When I try to access a secure URL (e.g. /secure/foo.do) from a java >> program using apache httpclient library (where the client

Re: Nio Connector and self signed SSL certificate giving "No client certificate chain in this request"

2011-02-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Parag, On 2/4/2011 5:04 AM, Parag Thakur wrote: > When I try to access a secure URL (e.g. /secure/foo.do) from a java > program using apache httpclient library (where the client is configured > to use "C:\keys\webserver.keystore" as the truststore an

RE: Nio Connector and self signed SSL certificate giving "No client certificate chain in this request"

2011-02-04 Thread Parag Thakur
signed SSL certificate giving "No client certificate chain in this request" On 04/02/2011 10:04, Parag Thakur wrote: > Oddly, the same program works if I use > org.apache.coyote.http11.Http11Protocol instead of > org.apache.coyote.http11.Http11NioProtocol. Any idea what might b

Re: Nio Connector and self signed SSL certificate giving "No client certificate chain in this request"

2011-02-04 Thread Mark Thomas
On 04/02/2011 10:04, Parag Thakur wrote: > Oddly, the same program works if I use > org.apache.coyote.http11.Http11Protocol instead of > org.apache.coyote.http11.Http11NioProtocol. Any idea what might be > causing the NIO implementation to not work in this case? Does this have > anything to do with

Nio Connector and self signed SSL certificate giving "No client certificate chain in this request"

2011-02-04 Thread Parag Thakur
Hello, I have tomcat 6.0.30 configured with NIOConnector (org.apache.coyote.http11.Http11NioProtocol) using latest JRE (1.6.0_23). The connector has 1 way SSL enabled, except for a URL that requires 2 way SSL. I do so using following security constraint in web.xml:

Re: Have a Problem Importing an SSL Certificate

2010-10-31 Thread Ognjen Blagojevic
On 31.10.2010 23:38, Caldarale, Charles R wrote: From: Marwan Kandeel [mailto:marwan.kand...@bupa.com.sa] Subject: Re: Have a Problem Importing an SSL Certificate You do this SSL process by running batches. So you actually do not have access to tomcat interface. I think the system is built on

RE: Have a Problem Importing an SSL Certificate

2010-10-31 Thread Caldarale, Charles R
> From: Marwan Kandeel [mailto:marwan.kand...@bupa.com.sa] > Subject: Re: Have a Problem Importing an SSL Certificate > You do this SSL process by running batches. So you actually do > not have access to tomcat interface. I think the system is built > on tomcat 5.5. You will sti

Re: Have a Problem Importing an SSL Certificate

2010-10-31 Thread Marwan Kandeel
Users List Subject: Re: Have a Problem Importing an SSL Certificate Sent: Nov 1, 2010 1:10 AM Hi Marwan, > I'm spinning into circles importing the certificate into my system. We are > using a web based software that resides on tomcat. Here are the instructions > I have got from the

Re: Have a Problem Importing an SSL Certificate

2010-10-31 Thread Marwan Kandeel
ine. --Original Message-- From: Ognjen Blagojevic To: Tomcat Users List ReplyTo: Tomcat Users List Subject: Re: Have a Problem Importing an SSL Certificate Sent: Nov 1, 2010 1:10 AM Hi Marwan, > I'm spinning into circles importing the certificate into my system. We are >

Re: Have a Problem Importing an SSL Certificate

2010-10-31 Thread Ognjen Blagojevic
Hi Marwan, I'm spinning into circles importing the certificate into my system. We are using a web based software that resides on tomcat. Here are the instructions I have got from the vendor on how to import the SSL: Instructions seems correct. I'm assuming the root certificate is the one

RE: Have a Problem Importing an SSL Certificate

2010-10-31 Thread Caldarale, Charles R
> From: Marwan Kandeel [mailto:marwan.kand...@bupa.com.sa] > Subject: Have a Problem Importing an SSL Certificate > I'm really going out of my mind!!! So I guess it's good that we can't read it to find out what Tomcat version you're using, if you're usin

Have a Problem Importing an SSL Certificate

2010-10-31 Thread Marwan Kandeel
Hello guys, I'm spinning into circles importing the certificate into my system. We are using a web based software that resides on tomcat. Here are the instructions I have got from the vendor on how to import the SSL: Download your Certificate files from the email from CA to the directory where

RE: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-26 Thread Brett Delle Grazie
Hi Richard, Comments below, Regards, Brett From: Richard da Silva [mailto:roman_s...@yahoo.com] Sent: 26 October 2010 13:30 To: Tomcat Users List; Brett Delle Grazie; crypto@gmail.com Cc: darryl.le...@unsw.edu.au Subject: RE: SSL Certificate : Unable to configure Tomcat

RE: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-26 Thread Richard da Silva
from. And, to make matters worse, there is no "error message" to tell me what I am doing wrong. Richard da Silva --- On Tue, 10/26/10, Brett Delle Grazie wrote: From: Brett Delle Grazie Subject: RE: SSL Certificate : Unable to configure Tomcat "server.xml" To: "

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-26 Thread Crypto Sal
On 10/26/2010 04:08 AM, Richard da Silva wrote: Thanks for your response, Darryl But, the certificate is not the problem. The Tomcat Configuration is the issue (server.xml) Richard da Silva Richard, Are you sure that the certificate isn't also the problem? As Brett has previously menti

RE: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-26 Thread Brett Delle Grazie
e Cc: darryl.le...@unsw.edu.au Subject: SSL Certificate : Unable to configure Tomcat "server.xml" Thanks for your response, Darryl But, the certificate is not the problem. The Tomcat Configuration is the issue (server.xml) Richard da Silva --- On Tue, 10/26/10, Darryl Lewis wrote: From:

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-26 Thread Rainer Frey
On Tuesday 26 October 2010 08:24:53 Richard da Silva wrote: > (a) Exists in certificate store 'cacerts' (bad idea btw). > > Yes it does exist. > > But, I took your advice, and created a separate keystore. Then imported the > certificate there Did you create a new private key and request a new ce

SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-26 Thread Richard da Silva
Thanks for your response, Darryl But, the certificate is not the problem. The Tomcat Configuration is the issue (server.xml) Richard da Silva --- On Tue, 10/26/10, Darryl Lewis wrote: From: Darryl Lewis Subject: RE: SSL Certificate : Unable to configure Tomcat "server.xml" T

RE: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-26 Thread Darryl Lewis
Here are my notes on importing a SSL certificate in case that is the problem. I had a lot of issues and errors when I first tried. (these were compiled from suggestions on this list) Importing SSL certificates RootAddTrustExternalCARoot.crt Intermediate CA

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-25 Thread Richard da Silva
m does not lie with the SSL >certificate itself. It's with the Tomcat configuration (and that damn >server.xml file).  Richard da Silva --- On Mon, 10/25/10, Brett Delle Grazie wrote: From: Brett Delle Grazie Subject: Re: SSL Certificate : Unable to configure Tomcat "server

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-25 Thread Brett Delle Grazie
file --- "server.xml_modified" is the file which I > modified, and the one I am now trying to use in Tomcat. > > Any helpful tips would be greatly appreciated. > > Thanks. > > > > > Richard da Silva > > > > --- On Fri, 10/

SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-24 Thread Richard da Silva
- is the file which I modified, and the one I am now trying to use in Tomcat. Any helpful tips would be greatly appreciated. Thanks. Richard da Silva --- On Fri, 10/22/10, Richard da Silva wrote: From: Richard da Silva Subject: SSL Certificate : Unable to configure Tomcat "server.xm

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-22 Thread Pid
On 22/10/2010 19:02, Caldarale, Charles R wrote: > From: Stefano Suzzi [mailto:s.su...@protesa.it] > Subject: Re: SSL Certificate : Unable to configure Tomcat "server.xml" > > i think you miss the protocol and scheme attribute. > > The OP clearly had the scheme

RE: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-22 Thread Caldarale, Charles R
From: Stefano Suzzi [mailto:s.su...@protesa.it] Subject: Re: SSL Certificate : Unable to configure Tomcat "server.xml" i think you miss the protocol and scheme attribute. The OP clearly had the scheme specified, and the protocol defaults to "HTTP/1.1". Start aga

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-22 Thread Stefano Suzzi
; > Richard da Silva > > --- On Fri, 10/22/10, Pid * wrote: > > From: Pid * > Subject: Re: SSL Certificate : Unable to configure Tomcat "server.xml" > To: "Tomcat Users List" > Date: Friday, October 22, 2010, 4:04 PM > > On 22 Oct 2010,

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-22 Thread Pid
On 22/10/2010 14:04, Pid * wrote: > On 22 Oct 2010, at 13:54, Richard da Silva wrote: > >> Hi all, >> >> I've been fighting with a very silly problem all day. >> >> I have an instance of Sun Identity Manager (IDM) running on a Tomcat server. >> >> To be able to use some of its Resources features,

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-22 Thread Richard da Silva
e found nothing remotely addressing my problem. Richard da Silva --- On Fri, 10/22/10, Pid * wrote: From: Pid * Subject: Re: SSL Certificate : Unable to configure Tomcat "server.xml" To: "Tomcat Users List" Date: Friday, October 22, 2010, 4:04 PM On 22 Oct 2010, at 13:54,

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-22 Thread Pid *
On 22 Oct 2010, at 13:54, Richard da Silva wrote: > Hi all, > > I've been fighting with a very silly problem all day. > > I have an instance of Sun Identity Manager (IDM) running on a Tomcat server. > > To be able to use some of its Resources features, we have had to create and > install SSL Cer

SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-22 Thread Richard da Silva
Hi all, I've been fighting with a very silly problem all day. I have an instance of Sun Identity Manager (IDM) running on a Tomcat server. To be able to use some of its Resources features, we have had to create and install SSL Certificates. Using some of the online documentation on the install

Re: Help troubleshooting SSL certificate problem

2010-08-07 Thread Hassan Schroeder
On Sat, Aug 7, 2010 at 3:32 PM, Steve Johnson wrote: > I went through those instructions when I first got SSL working.  I had SSL > working fine.  All I did this time around was replace one keystore file > (tcserver.keystore) with another.  I used the same password and alias this > time around so

Re: Help troubleshooting SSL certificate problem

2010-08-07 Thread Steve Johnson
The GoDaddy instructions mostly talk about building the keystore file, and are very similar to that section of the document you mention. I assume what you're getting at is that the instructions you mention might be helpful to me. I have, unfortunately, been over those instructions backwards

Re: Help troubleshooting SSL certificate problem

2010-08-07 Thread Hassan Schroeder
On Sat, Aug 7, 2010 at 2:20 PM, Steve Johnson wrote: > I've followed the GoDaddy instructions for adding a total of 4 certs (root + > 2 intermediates + ours) to a fresh keystore file. Do the "GoDaddy instructions" look anything like the Tomcat ones? :-)

Help troubleshooting SSL certificate problem

2010-08-07 Thread Steve Johnson
Greetings, We're developing an application on top of Tomcat. Our incoming connections are always HTTPS. We've been using the self signed cert that came with tcServer for testing, but now I'm trying to get our setup working with an officially signed certificate we just got from GoDaddy. I'

Re: Help to import SSL certificate to Tomcat

2010-05-25 Thread Pid
On 25/05/2010 14:00, Gustavo Mauro wrote: > > Hello all, > I am currently deploying a solution (B.O. Server) that uses both IIS 6 > and Tomcat 5; this last one just as a servlet handler. > This web site though must be secure and reached only via HTTPS (tcp > 443/84

Help to import SSL certificate to Tomcat

2010-05-25 Thread Gustavo Mauro
Hello all, I am currently deploying a solution (B.O. Server) that uses both IIS 6 and Tomcat 5; this last one just as a servlet handler. This web site though must be secure and reached only via HTTPS (tcp 443/8443). The SSL certificate was generated to IIS and, using

Re: How to install an updated third party SSL certificate for B2B transactions

2009-09-09 Thread Ziggy
On 9/8/09, Peter Crowther wrote: > 2009/9/8 David Uctaa > >> I have inherited a Tomcat 5.5 installation running on Windows XP. There >> are >> processes on this box which do server-to-server connections with a third >> party via HTTPS over SSL. We have i

Re: How to install an updated third party SSL certificate for B2B transactions

2009-09-09 Thread David Uctaa
gt; Many thanks. > > On Tue, Sep 8, 2009 at 10:20 AM, Peter Crowther < > peter.crowt...@melandra.com > >> wrote: > > > >> 2009/9/8 David Uctaa > >> > >> > I have inherited a Tomcat 5.5 installation running on Windows XP. > There > >&

Re: How to install an updated third party SSL certificate for B2B transactions

2009-09-09 Thread Serge Fonville
re >> > are >> > processes on this box which do server-to-server connections with a third >> > party via HTTPS over SSL.  We have installed the third party's SSL >> > certificate on our server, and they have done likewise with ours.  We use >> > th

Re: How to install an updated third party SSL certificate for B2B transactions

2009-09-09 Thread David Uctaa
Tue, Sep 8, 2009 at 10:20 AM, Peter Crowther wrote: > 2009/9/8 David Uctaa > > > I have inherited a Tomcat 5.5 installation running on Windows XP. There > > are > > processes on this box which do server-to-server connections with a third > > party via HTTPS over SSL.

Re: How to install an updated third party SSL certificate for B2B transactions

2009-09-08 Thread Peter Crowther
2009/9/8 David Uctaa > I have inherited a Tomcat 5.5 installation running on Windows XP. There > are > processes on this box which do server-to-server connections with a third > party via HTTPS over SSL. We have installed the third party's SSL > certificate on our server

How to install an updated third party SSL certificate for B2B transactions

2009-09-08 Thread David Uctaa
I have inherited a Tomcat 5.5 installation running on Windows XP. There are processes on this box which do server-to-server connections with a third party via HTTPS over SSL. We have installed the third party's SSL certificate on our server, and they have done likewise with ours. We use

Re: Client SSL certificate chain in Tomcat 6 when using AJP

2009-09-02 Thread Rainer Jung
On 31.08.2009 18:38, iam wrote: > Bill, Thanks for your prompt response. > I see that it will be available in Tomcat 6.0.21 onwards. Do you know when > will it be available for download ? > > Also, does it resolve the 8k size limit on AJP connector or if there is a way > around it ? > We are usi

Re: Client SSL certificate chain in Tomcat 6 when using AJP

2009-08-31 Thread iam
thinking this will be a big issue ! Thanks A t u l From: Bill Barker To: users@tomcat.apache.org Sent: Thursday, August 27, 2009 8:40:14 PM Subject: Re: Client SSL certificate chain in Tomcat 6 when using AJP "atul" wrote in message news:21

Re: Client SSL certificate chain in Tomcat 6 when using AJP

2009-08-27 Thread Bill Barker
tomcat code looks like it only wants to get single > cert! > org.apache.jk.core.MsgContext public void action(ActionCode actionCode, > Object param) {... > >} else if( actionCode==ActionCode.ACTION_REQ_SSL_ATTRIBUTE ) { > Request req=(Request)param;

Client SSL certificate chain in Tomcat 6 when using AJP

2009-08-27 Thread atul
ect param) {... } else if( actionCode==ActionCode.ACTION_REQ_SSL_ATTRIBUTE ) { Request req=(Request)param; // Extract SSL certificate information (if requested) MessageBytes certString = (MessageBytes)req.getNote(WorkerEnv.SSL_CERT_NOTE); if(

Renew SSL Certificate

2009-05-24 Thread Alexander Diedler
Hello all, We use a Tomcat 6.0.16 and the build-in Keystore technology for the SSL functionality. Now it is time to re-new the Certificate. We get an error by importing the certificate. Jara JRE 1.6.0_06 We use the Same SSL-Provider and bought the same SSL type and generate the SSL cert with the

applying existing SSL certificate (tomcat + linux)

2008-12-08 Thread kachijs
(do i have to convert it) ? can anybody help me ? Please -- View this message in context: http://www.nabble.com/applying-existing-SSL-certificate-%28tomcat-%2B-linux%29-tp20905284p20905284.html Sent from the Tomcat - User mailing list archive at Nabble.com

Re: ssl certificate

2008-08-15 Thread Mark Thomas
Alonzo Wilson wrote: > Thank you. I look forward to having a tomcat restart command. The > stop and restart is considered downtime and requires documentation. > I'm hoping it will come in a future release. Sorry, that is very unlikely to ever happen. You can restart a context without dropping c

Re: ssl certificate

2008-08-15 Thread Alonzo Wilson
Thank you. I look forward to having a tomcat restart command. The stop and restart is considered downtime and requires documentation. I'm hoping it will come in a future release. >>> Mark Thomas <[EMAIL PROTECTED]> 8/14/2008 11:17 AM >>> Alonzo Wilson wrote: > Please explain. How does adding a

Re: ssl certificate

2008-08-14 Thread Mark Thomas
Alonzo Wilson wrote: > Please explain. How does adding a new connector restart tomcat and > activate the new ssl cert? It doesn't. In 4.1.30 you can use the admin app to add a connector and start it. In 6.0.16 the admin app doesn't exist so JMX is your only option but this could be tricky so re

<    1   2   3   >