Re: [OT] tomcat 8.5.37, Http11Nio2Protocol (OpenSSL), clientAuth or certificateVerification options

2019-02-13 Thread Mark Thomas
On 12/02/2019 22:26, Christopher Schultz wrote: > Mark, > > On 2/12/19 13:27, Mark Thomas wrote: >> Try again. Prompted for certificate. Select valid cert. Connection >> refused. Ah. the trust store again. Switch back to the OpenSSL >> config. > > This is a real point of confusion for users... th

Re: [OT] tomcat 8.5.37, Http11Nio2Protocol (OpenSSL), clientAuth or certificateVerification options

2019-02-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mark, On 2/12/19 13:27, Mark Thomas wrote: > Try again. Prompted for certificate. Select valid cert. Connection > refused. Ah. the trust store again. Switch back to the OpenSSL > config. This is a real point of confusion for users... the differenc

Re: tomcat 8.5.37, Http11Nio2Protocol (OpenSSL), clientAuth or certificateVerification options

2019-02-12 Thread John Palmer
You're (both) quite right, my apologies. (this is embarrassing) In my defense, I've been bouncing back and forth between my personal desktop machine (windows 10) where I was having this issue... and a development server, where this was working just fine. While at lunch, it occurred to me to wonde

Re: tomcat 8.5.37, Http11Nio2Protocol (OpenSSL), clientAuth or certificateVerification options

2019-02-12 Thread Mark Thomas
On 12/02/2019 17:21, John Palmer wrote: > using the old Connector/clientAuth="true" or the new > Connector/SSLHostConfig/ certificateVerification="REQUIRED" (tried > lowercase and without the D) format..doesn't seem to work properly. > > no matter what value I use or which format... the b

Re: tomcat 8.5.37, Http11Nio2Protocol (OpenSSL), clientAuth or certificateVerification options

2019-02-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John, On 2/12/19 12:21, John Palmer wrote: > using the old Connector/clientAuth="true" or the new > Connector/SSLHostConfig/ > certificateVerification="REQUIRED" (tried lowercase and without the > D) format..doesn't seem to work properly. > > no m

tomcat 8.5.37, Http11Nio2Protocol (OpenSSL), clientAuth or certificateVerification options

2019-02-12 Thread John Palmer
using the old Connector/clientAuth="true" or the new Connector/SSLHostConfig/ certificateVerification="REQUIRED" (tried lowercase and without the D) format..doesn't seem to work properly. no matter what value I use or which format... the behavior seems to be that the client cert is prompt