Re: Wildcard certificates

2019-04-17 Thread John Dale
Exactly .. this is part of the solution. I am having tomcat behave smartly in response to the certificate validation, and I have a nice path to develop some cool tools, similar to HTTPD, around certbot (I love that this is a free service, but I do have some concerns over centralized CSA, so I do

Using custom Configurator with WebSockets

2019-04-17 Thread Christopher Dodunski
Hello, Just a quick question with regard to extending ServerEndpointConfig.Configurator to override Tomcat's default action of instantiating the POJO class annotated with @ServerEndpoint on receiving a WebSocket request. My reason for doing this is that my endpoint class depends on IoC

Re: Is there a problem with the digest?

2019-04-17 Thread Richard Huntrods
Nothing changed since before your server crashed to after, and I've checked all junk and spam filters. I am still not receiving any of the digests anymore. Are the digests even being sent out? Thanks, -R On 12/04/2019 16:32, Mark Thomas wrote: > On 12/04/2019 16:29, Mark Thomas wrote: >>

Re: Wildcard certificates

2019-04-17 Thread John Dale
I manage dozens of contexts/domains using loosely coupled code. Chris - of course it's amazing. I would also call it super and profound. :) I am in the middle of some TI at our office today .. can't really stop to do this. I have the code used to identify and validate the certbot requests and

Re: Wildcard certificates

2019-04-17 Thread John Dale
On 4/17/19, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > John, > > On 4/17/19 10:42, John Dale wrote: >> My understanding is that the folks at SUN really put their backs >> into it from the beginning: >>

Re: how to enable OCSP for Tomcat w OpenSSL

2019-04-17 Thread John Palmer
I'm still struggling with getting APR/OpenSSL to do the OCSP check. I'd appreciate some tips: versions: Java 8 (1.8.0_202), 64-bit, tomcat 8.5.38, APR 1.2.21 using APR/OpenSSL (the tc-native-1.dll binary for Windows, compiled w OCSP support - the X64 dll from

OS

2019-04-17 Thread liname...@outlook.com
Hello, I am doing an investigation. Does Windows Server 2019 support the following products: Apache Tomcat 6.0.35 Tomcat Connectors (mod_jk) 1.2.35-m1.0 Is the other version supported? Can you tell me, thank you very much.

Re: Upgrade from Tomcat 7 to Tomcat 9.0.17

2019-04-17 Thread Luis Rodríguez Fernández
Hello Akram, If you can not put the jars inside each webapp perhaps you could define a shared.loader in your catalina.properties [1]. It works for us. Hope it helps, Luis [1] https://tomcat.apache.org/tomcat-9.0-doc/class-loader-howto.html#Advanced_configuration El mar., 16 abr. 2019 a

Re: Wildcard certificates

2019-04-17 Thread TurboChargedDad .
Multi-tenant or single tenant system? On Wed, Apr 17, 2019 at 8:54 AM Sean Dawson wrote: > Thanks for the replies - I'm willing to use NGINX to handle this for us - > can you point me to a good page on that? > > > On Wed, Apr 17, 2019 at 9:46 AM John Larsen > wrote: > > > We do the same - via

Re: Wildcard certificates

2019-04-17 Thread John Dale
I have a really nice process that works great with certbot. Single command to renew all of my certs and I'm finished. I get some piece of mind having a Java process guarding the front door. Seems to be more impervious to overflows. What am I missing? I think what I have might be easily

Re: Wildcard certificates

2019-04-17 Thread TurboChargedDad .
We terminated SSL above the tomcat layer using NGINX or Apache to avoid the complexities that come with managing a JKS. I want to hear all I can on this subject.

Re: Wildcard certificates

2019-04-17 Thread John Larsen
We do the same - via mod_jk we utilize apache httpd to handle the SSL. Keeps things simple and works well. John Larsen On Wed, Apr 17, 2019 at 7:44 AM TurboChargedDad . wrote: > We terminated SSL above the tomcat layer using NGINX or Apache to avoid > the complexities that come with managing

Wildcard certificates

2019-04-17 Thread Sean Dawson
Hello, I have a widlcard certificate from GoDaddy. Can I use this with Tomcat? (8.5) I have the files crt (primary certificate?), p7b (intermediate?), pfx (private key?), and a .key file. I did not generate a certificate request prior to this. Google is telling me that either I need to generate

Re: Wildcard certificates

2019-04-17 Thread Sean Dawson
Thanks for the replies - I'm willing to use NGINX to handle this for us - can you point me to a good page on that? On Wed, Apr 17, 2019 at 9:46 AM John Larsen wrote: > We do the same - via mod_jk we utilize apache httpd to handle the SSL. > Keeps things simple and works well. > John Larsen > >

Re: Wildcard certificates

2019-04-17 Thread TurboChargedDad .
I would have the opposite feeling. I would not want a java process parked out in the internet. Not saying you're wrong just my personal feeling. Maybe things have shifted in a different direction over the year. I do agree that something like that would be helpful to other tomcat admins.

Re: Wildcard certificates

2019-04-17 Thread Sean Dawson
On Wed, Apr 17, 2019 at 9:20 AM Sean Dawson wrote: > > Hello, I have a widlcard certificate from GoDaddy. Can I use this with > Tomcat? (8.5) > > I have the files crt (primary certificate?), p7b (intermediate?), pfx > (private key?), and a .key file. I did not generate a certificate request >

Re: Wildcard certificates

2019-04-17 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 To whom it may concern, On 4/17/19 09:44, TurboChargedDad . wrote: > We terminated SSL above the tomcat layer using NGINX or Apache to > avoid the complexities that come with managing a JKS. I want to > hear all I can on this subject. It's not

Re: Wildcard certificates

2019-04-17 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 To whom it may concern, On 4/17/19 10:22, TurboChargedDad . wrote: > I would have the opposite feeling. I would not want a java process > parked out in the internet. Not saying you're wrong just my > personal feeling. It would be interesting to

Re: Wildcard certificates

2019-04-17 Thread John Dale
My understanding is that the folks at SUN really put their backs into it from the beginning: https://stackoverflow.com/questions/479701/does-java-have-buffer-overflows Since hot spot compilers have matured, Java is virtually as fast as C/++ (the Java is slow argument falls in my deaf ears, even

Re: Wildcard certificates

2019-04-17 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John, On 4/17/19 10:42, John Dale wrote: > My understanding is that the folks at SUN really put their backs > into it from the beginning: > https://stackoverflow.com/questions/479701/does-java-have-buffer-overf lows > > Since hot spot compilers