Fatal alert: certificate_unknown when test SSL with expired client cert

2007-10-22 Thread yuanyuan
Dear Sir/Madam, I am test SSL connection with Tomcat5.0.28 and j2sdk1.4.1_06. Below is the setting of my Tomcat for SSL: Connector port=8443 maxThreads=150 minSpareThreads=25 maxSpareThreads=75 enableLookups=true disableUploadTimeout=true

Start tomcat without Connector

2007-10-22 Thread Auke Noppe
Hi there, Is it possible to start an instance of (embedded)tomcat without connector, and to invoke pages through the context.invoke(request, response) method? I have written a small application which starts embedded tomcat with a server, engine, host and context, but without connector. And

FW: Include of Visual C++ runtime library into tomcat installation on Windows plattform..

2007-10-22 Thread Sören Krokfors
Hello! I have noticed that Tomcat installation does not include the msvcr71.dll, there are merge modules for this from Microsoft. I also did install Tomcat in native mode, maybe that have something to do with it? Problem appears first when you try to Start tomcat service, it will not start

RE: Include of Visual C++ runtime library into tomcat installation on Windows plattform..

2007-10-22 Thread Caldarale, Charles R
From: Sören Krokfors [mailto:[EMAIL PROTECTED] Subject: FW: Include of Visual C++ runtime library into tomcat installation on Windows plattform.. I have noticed that Tomcat installation does not include the msvcr71.dll Note that the above .dll is included in the current Sun JDK and JRE

Maven And Load Balancing deployment

2007-10-22 Thread Stéphane Hanser
Hello everybody, I’m currently working on a webapp using tomcat as application server. As we got a lot of users and the server was not able to handle them all alone, we run 2 instances of tomcat and we use load balancing through a workers.properties file in apache2 directory. I need to

Tomcat 4.1.27 SSL Question

2007-10-22 Thread Velurethu, Abi J
Hello, I have SSL setup on tomcat port 8443, the ssl connection works for a while and then times out (not able to connection). However, the connection on port 80 is still active and I can connect with out any issues. Anyone seen this before. Any ideas. Thanks, Abi

Re: Maven And Load Balancing deployment

2007-10-22 Thread Johnny Kewl
--- HARBOR: http://coolharbor.100free.com/index.htm Now Tomcat is also a cool application server --- - Original Message - From: Stéphane Hanser

Re: Maven And Load Balancing deployment

2007-10-22 Thread Rainer Jung
You can tell the mod_jk load balancer to disable or stop workers temporarily via a status worker. There is a docs page for the status worker, which also describes the URL structure. We also have an ant task jkstatus, that can be used to combine ant with the mod_jk status worker. There might

RE: Maven And Load Balancing deployment

2007-10-22 Thread Stéphane Hanser
Thanks a lot, I used the jkstatus and added url calls in my deployment process. Everything works fine, my app is now available even while I'm redeploying it Stéphane -Message d'origine- De : Rainer Jung [mailto:[EMAIL PROTECTED] Envoyé : lundi 22 octobre 2007 17:16 À : Tomcat Users List

Re: Maven And Load Balancing deployment

2007-10-22 Thread Rainer Jung
Great. If you want to improve our documentation, feel free to open a bugzilla issue and attach some text. Stéphane Hanser wrote: Thanks a lot, I used the jkstatus and added url calls in my deployment process. Everything works fine, my app is now available even while I'm redeploying it

RE: AJP port - How to stop Tomcat from incrementing the AJP port number

2007-10-22 Thread Fisher, Mitchell L
Shaji wrote: When Tomcat 6 finds that the specified AJP port is already in use, it increments the port number and try to bind to the next available port. Why does the AJP connector do this? Does mod_jk try the next port too? -- Mitchell Fisher | Unisys Corp. -Original Message-

Re: Tomcat 5.5.25, SSL and invalid keystore format

2007-10-22 Thread Vinny R.
Werner, After having the same problem, I discovered that by default keytool defaults to GNU Classpath, whereas what you want is Java's identically-named keytool. Try this: $JAVA/keytool -genkey -alias tomcat -keyalg RSA -keystore /tmp/tomcat.keystore Where $JAVA is your java install's bin

How can I ensure that client access servlets via HTTPS?

2007-10-22 Thread alla winter
I would appreciate if you give me a suggestion how to enforce clients to access servlet through SSL for TOMCAT 5.2.25 and JDK 1.5.0_12. ( The TOMCAT is set up for SSL with APR 1.9 and I can access it via HTTPS) I was thinking that I can accomplish that with the following:

Timeout issue while calling servlet deployed in standalone Tomcat

2007-10-22 Thread Mrinmoy Pal
Hi, There is a problem in out project for an outside Application to connect to Servlet deployed in Tomcat. The outside application is giving Timeout errors around 30-40% of the time. There are more than 20 servlets deployed in the tomcat and there are around 10-12 requests (for all the servlets)

Re: Number of Threads in request processing pool and JVM heap size

2007-10-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Venky, Venkatesh Jayaraman (jvenky) wrote: I have 80 servlets on tomcat and each of them can have 5 five concurrent requests to be processed as per design. That is an odd design. Why up to five, but no more? 80 * 5 = 400 thread I need for on

Re: Start tomcat without Connector

2007-10-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Auke, Auke Noppe wrote: Is it possible to start an instance of (embedded)tomcat without connector, and to invoke pages through the context.invoke(request, response) method? Do you mind describing a scenario where this is useful? The only thing I

Using JNDI. java:comp .... not defined?

2007-10-22 Thread Andrei Tchijov
Hi, I guess I am missing something very very basic, but I can not see what it is. I am trying to make some resources available via JNDI. I have put appropriate GlabalNamingResources/Resource into my server.xml ( and I think I did it properly - at least tomcat is not complaining about

Re: Certificates, CLIENT-CERT Authentication and Authorization

2007-10-22 Thread Stephen More
There seems to be good documentation for configuring Realms. I currently have a JAASRealm working by implementing a javax.security.auth.spi.LoginModule I have found very little documentation for custom Authenticators. Your _outline_ is helpful, but I am still struggling. My class which extends

Re: Using JNDI. java:comp .... not defined?

2007-10-22 Thread Mark Thomas
Andrei Tchijov wrote: when I am trying to do ... initCtx.list( java:comp/env ); Do I need to do anything to enable JNDI? Does it make any difference that I am trying to use JNDI from Valve? Probably. I haven't looked at the code but I would not expect this to work. Test it in a JSP to

[ANN] Apache Tomcat 5.0.x no longer supported

2007-10-22 Thread Mark Thomas
The Apache Tomcat team wishes to announce that Tomcat 5.0.x will no longer be supported. Users are encouraged to upgrade to the latest stable 6.x release or, if that is not practical, the latest stable 5.5.x for continued support. Kind regards, The Apache Tomcat team

RE: Number of Threads in request processing pool and JVM heap size

2007-10-22 Thread Venkatesh Jayaraman (jvenky)
Thanks Chris for the response. -Venky -Original Message- From: Christopher Schultz [mailto:[EMAIL PROTECTED] Sent: Monday, October 22, 2007 1:04 PM To: Tomcat Users List Subject: Re: Number of Threads in request processing pool and JVM heap size -BEGIN PGP SIGNED MESSAGE-

Re: Start tomcat without Connector

2007-10-22 Thread Bill Barker
It is possible, but not easy. The Connector is integrated pretty tightly with the Catalina code now. In particular, you can't just call the invoke method on the Context, since the mappings are done via the Connector. It will probably be easier to create a Connector using the

Re: Fatal alert: certificate_unknown when test SSL with expired client cert

2007-10-22 Thread Bill Barker
There isn't a problem here :). When Tomcat (or more correctly JSSE) sees an expired certificate, it just stops talking to the client, leaving the client to have to guess the reason. There are various patches in BZ to warn on expired certs (mostly against TC 5), but none that have been

Re: Using JNDI. java:comp .... not defined?

2007-10-22 Thread foo shyn
Hmm which Tomcat version you are using? For Tomcat 4.1 AFAIK you have to put a link in your application's web.xml to the global resources in order for your application to access it. HTH FooShyn Mark Thomas wrote: Andrei Tchijov wrote: when I am trying to do ... initCtx.list(

Cleanly shutdown tomcat

2007-10-22 Thread Kevin Jackson
Hi, We have tomcat 6.0.14 installed on fedora core running JDK6. Using 'service tomcat start' works fine (executes /etc/init.d/tomcat.sh) : su -c $TOMCAT_USER $TOMCAT_SCRIPT start (where $TOMCAT_USER == tomcat; $TOMCAT_SCRIPT == catalina.sh) However when we run the corresponding stop

Re: Using JNDI. java:comp .... not defined?

2007-10-22 Thread Andrei Tchijov
I am using 5.5.20 On Oct 22, 2007, at 10:25 PM, foo shyn wrote: Hmm which Tomcat version you are using? For Tomcat 4.1 AFAIK you have to put a link in your application's web.xml to the global resources in order for your application to access it. HTH FooShyn Mark Thomas wrote: Andrei

Re: Cleanly shutdown tomcat

2007-10-22 Thread Kevin Jackson
Hi, I have occasionally seen this problem, but every time I have seen it is due to a poorly written JEE application. For example I have seen in Tomcat 5.5 if the JEE application creates a thread but due to some problem or exception it does not remove the thread, tomcat will not shutdown.

Re: Cleanly shutdown tomcat

2007-10-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kevin, Kevin Jackson wrote: Yes we are using the pure java version (not rpm package) for this reason. Then where did the /etc/init.d/tomcat.sh come from? Did you roll your own? Did you copy the packaged version and configure it to work with the

Re: Tomcat Manager session list Gussed user name

2007-10-22 Thread Jacob Rhoden
Jacob Rhoden wrote: I have recently discovered the tomcat manager can not only show a list of sessions, but the Gussed username for that session. This is very handy except it seems to read a session variable called user and just displays it. Our session object called user is a class not a