Hello,

        I'm running Tomcat 5.5 on Windows XP with Java 1.5. In
server.xml I configured SSL as follows:

  <Connector port="8443"
        maxHttpHeaderSize="8192"
        maxThreads="150"
        minSpareThreads="25"
        maxSpareThreads="75"
        enableLookups="false"
        disableUploadTimeout="true"
        acceptCount="100"
        scheme="https"
        secure="true"
        clientAuth="true"
        sslProtocol="TLS"
        
SSLImplementation="org.apache.tomcat.util.net.jsse.JSSEImplementation"
/>

        When I try to log in I get the following:

handling exception: javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: Certificate contains unknown
critical extensions: [2.5.29.36, 2.5.29.30]

        I spoke to CertPath folks at Sun, they say the default
implementation/settings of JSSE in Java 1.5 should be able to handle
these extensions (name and policy constraints). (The certs in the path
*do* contain those critical extensions.) Is it possible that this fails
because of how Tomcat 5.5 uses JSSE (e.g., overrides defaults, etc.)?
        I will appreciate any and all help.
        
        Thank you,
        PR


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to