Re: About certificates in Tomcat SSL support

2012-01-13 Thread Mark H. Wood
On Thu, Jan 12, 2012 at 09:14:28AM -0800, James Lampert wrote: Scenario: I created a self-signed certificate for the box I was testing: CN = James Lampert As already pointed out, there's your problem. To identify a networked service, the value of CN should be the FQDN of the host providing

Re: About certificates in Tomcat SSL support

2012-01-13 Thread James Lampert
Mark H. Wood wrote: As already pointed out, there's your problem. To identify a networked service, the value of CN should be the FQDN of the host providing the service. (This is why people suddenly became interested in securing DNS: we are relying on it to validate certificate bindings to

About certificates in Tomcat SSL support

2012-01-12 Thread James Lampert
Scenario: I created a self-signed certificate for the box I was testing: CN = James Lampert OU = Development Lab O = Touchtone Corporation L = Costa Mesa ST = California C = US I then installed it into the Tomcat server on that box. Connecting to the site with Firefox, I was told that the

Re: About certificates in Tomcat SSL support

2012-01-12 Thread Pid *
On 12 Jan 2012, at 17:15, James Lampert jam...@touchtonecorp.com wrote: Scenario: I created a self-signed certificate for the box I was testing: CN = James Lampert OU = Development Lab O = Touchtone Corporation L = Costa Mesa ST = California C = US I then installed it into the Tomcat

Re: About certificates in Tomcat SSL support

2012-01-12 Thread James Lampert
I created a self-signed certificate for the box I was testing: CN = James Lampert Pid * wrote: The Common Name must match the domain name of the server as seen by the client. Hmm. So where Keytool asks What is your first and last name? you answer not with what it's asking for, but with