tomcat and ssl

2020-04-27 Thread Beard, Shawn M.
I have an app running in tomcat 9 that makes an ssl call to an external webservice. It fails with these errors in the logs: ERROR javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path

RE: tomcat and ssl [EXTERNAL]

2020-04-27 Thread Beard, Shawn M.
@tomcat.apache.org Subject: Re: tomcat and ssl [EXTERNAL] ** CAUTION: External message On 27/04/2020 17:21, Beard, Shawn M. wrote: > I have an app running in tomcat 9 that makes an ssl call to an > external webservice. > > > > It fails with these errors in t

RE: tomcat and ssl [EXTERNAL]

2020-04-27 Thread Beard, Shawn M.
requests are normally using /lib/security/cacerts as truststore: Check if root (intermediate) certificate exists for targeted endpoint. BR, Johann Von: Beard, Shawn M. Gesendet: Montag, 27. April 2020 18:22 An: users@tomcat.apache.org Betreff: tomcat and ssl I have an app running in tomcat 9

RE: tomcat and ssl [EXTERNAL]

2020-04-27 Thread Beard, Shawn M.
To: users@tomcat.apache.org Subject: Re: tomcat and ssl [EXTERNAL] ** CAUTION: External message On 27/04/2020 17:29, Beard, Shawn M. wrote: > This is a 3rd party app so can't do that. We need to configure tomcat to have > apps use a trust store just like any other java container. That

RE: Upgrading from 9.0.20 to 9.0.34 AJP connector issue [EXTERNAL]

2020-04-30 Thread Beard, Shawn M.
My workers is identical to yours and it works. Here is our connector config that is working. Might want to try removing address="127.0.0.1" and/or tomcatAuthentication="false" The fix for the Ghostcat vulnerability created some config challenges on the ajp protocol. I'm pretty sure

RE: Apache tomcat 9.0.6 Compatibility with Adopt openJDK [EXTERNAL]

2020-04-28 Thread Beard, Shawn M.
We are running the Adopt Open JDK 8 and 11 builds on tomcat 9 with no issues. Shawn Beard Sr. Systems Engineer BTS +1-515-564-2528 -Original Message- From: Martin Grigorov Sent: Tuesday, April 28, 2020 12:56 AM To: Tomcat Users List Subject: Re: Apache tomcat 9.0.6 Compatibility with

RE: Changing the Java using by Tomcat [EXTERNAL]

2020-05-06 Thread Beard, Shawn M.
No we do this and use AdoptOpen JDK. If you are setting JAVA_HOME in any tomcat config like a setenv file or catalina file make sure to change those to point to the install of AdoptOpenJDK. Shawn Beard Sr. Systems Engineer BTS +1-515-564-2528 -Original Message- From: Reddy, Tippana

RE: SSL error [EXTERNAL]

2020-06-26 Thread Beard, Shawn M.
- From: Beard, Shawn M. Sent: Friday, June 26, 2020 11:57 AM To: Tomcat Users List Subject: RE: SSL error [EXTERNAL] The code is calling a new webservice. It has godaddy as its ca signer. It was getting the error before I added those java options. Those java options were my attempt to resolve

RE: SSL error [EXTERNAL]

2020-06-26 Thread Beard, Shawn M.
Beard Sr. Systems Engineer BTS +1-515-564-2528 -Original Message- From: calder Sent: Friday, June 26, 2020 11:45 AM To: Tomcat Users List Subject: Re: SSL error [EXTERNAL] ** CAUTION: External message In Fri, Jun 26, 2020, 10:37 Beard, Shawn M. wrote: > We are running tomcat-7.0

SSL error

2020-06-26 Thread Beard, Shawn M.
We are running tomcat-7.0.52(old I know) and java 1.7.0_80. When the app makes calls to an external webservice. It keeps throwing this error: javax.net.ssl.SSLException : javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: