Re: Tomcat 5.X SSL config

2004-07-31 Thread Bill Barker
You haven't specified a Trust Store, so you only get to choose a few cert
issuers (e.g. Verisign, Thawte) for your client cert.

POLO ARAUJO, JAVIER [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]

 Hi! I have a problem when triying to configure Tomcat 5.X (under windows
XP) to handle SSL and digital certificate. I have a server certificate (it's
valid), so I just import it to my keystore and follow the instructions to
modify the file server.xml (just change the keystoreFile, keystorePass and
clientAuth). The problem is that, when I access to http://localhost:8443,
the box where I can choose my client certificate pops up empty (I have a
valid client certificate in my browser) so I can't choose my client browser.

 First, I though it was a browser's config problem but using mozilla
happends the same thing. The most curious thing is that, with the same
keystore and using other app-server (Oracle's OC4J) it works fine (I can
choose my client certificate), so I think it's a Tomcat problem, but I don't
know what!

 Thanks a lot,

 Javier Polo.





-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Tomcat 5.X SSL config

2004-07-30 Thread POLO ARAUJO, JAVIER

Hi! I have a problem when triying to configure Tomcat 5.X (under windows XP) to handle 
SSL and digital certificate. I have a server certificate (it's valid), so I just 
import it to my keystore and follow the instructions to modify the file server.xml 
(just change the keystoreFile, keystorePass and clientAuth). The problem is that, when 
I access to http://localhost:8443, the box where I can choose my client certificate 
pops up empty (I have a valid client certificate in my browser) so I can't choose my 
client browser. 

First, I though it was a browser's config problem but using mozilla happends the same 
thing. The most curious thing is that, with the same keystore and using other 
app-server (Oracle's OC4J) it works fine (I can choose my client certificate), so I 
think it's a Tomcat problem, but I don't know what!

Thanks a lot,

Javier Polo.


RE: Tomcat 5.X SSL config

2004-07-30 Thread Stephan Kühn
HI,

i similar the same problem, I whant to setup server based ssl auth, but when i try to 
configure vew the webgui the hhtps conntector, tomcat will not start anymore.  Can cou 
give me your server.xml file, so ican compair eit whith my one ?



-Original Message-
From: POLO ARAUJO, JAVIER [mailto:[EMAIL PROTECTED] 
Sent: Freitag, 30. Juli 2004 10:26
To: [EMAIL PROTECTED]
Subject: Tomcat 5.X  SSL config


Hi! I have a problem when triying to configure Tomcat 5.X (under windows XP) to handle 
SSL and digital certificate. I have a server certificate (it's valid), so I just 
import it to my keystore and follow the instructions to modify the file server.xml 
(just change the keystoreFile, keystorePass and clientAuth). The problem is that, when 
I access to http://localhost:8443, the box where I can choose my client certificate 
pops up empty (I have a valid client certificate in my browser) so I can't choose my 
client browser. 

First, I though it was a browser's config problem but using mozilla happends the same 
thing. The most curious thing is that, with the same keystore and using other 
app-server (Oracle's OC4J) it works fine (I can choose my client certificate), so I 
think it's a Tomcat problem, but I don't know what!

Thanks a lot,

Javier Polo.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Tomcat 5.X SSL config

2004-07-30 Thread POLO ARAUJO, JAVIER
mcastDropTime=3000/

Receiver 
className=org.apache.catalina.cluster.tcp.ReplicationListener
tcpListenAddress=auto
tcpListenPort=4001
tcpSelectorTimeout=100
tcpThreadCount=6/

Sender
className=org.apache.catalina.cluster.tcp.ReplicationTransmitter
replicationMode=pooled/

Valve className=org.apache.catalina.cluster.tcp.ReplicationValve
   filter=.*\.gif;.*\.js;.*\.jpg;.*\.htm;.*\.html;.*\.txt;/
/Cluster
--



!-- Normally, users must authenticate themselves to each web app
 individually.  Uncomment the following entry if you would like
 a user to be authenticated the first time they encounter a
 resource protected by a security constraint, and then have that
 user identity maintained across *all* web applications contained
 in this virtual host. --
!--
Valve className=org.apache.catalina.authenticator.SingleSignOn
   debug=0/
--

!-- Access log processes all requests for this virtual host.  By
 default, log files are created in the logs directory relative to
 $CATALINA_HOME.  If you wish, you can specify a different
 directory with the directory attribute.  Specify either a relative
 (to $CATALINA_HOME) or absolute path to the desired directory.
--
!--
Valve className=org.apache.catalina.valves.AccessLogValve
 directory=logs  prefix=localhost_access_log. suffix=.txt
 pattern=common resolveHosts=false/
--

!-- Logger shared by all Contexts related to this virtual host.  By
 default (when using FileLogger), log files are created in the logs
 directory relative to $CATALINA_HOME.  If you wish, you can specify
 a different directory with the directory attribute.  Specify either a
 relative (to $CATALINA_HOME) or absolute path to the desired
 directory.--
Logger className=org.apache.catalina.logger.FileLogger
 directory=logs  prefix=localhost_log. suffix=.txt
timestamp=true/

  /Host

/Engine

  /Service

/Server

-


-Original Message-
From: Stephan Khn [mailto:[EMAIL PROTECTED]
Sent: vie 30/07/2004 10:42
To: Tomcat Users List
Subject: RE: Tomcat 5.X  SSL config
 
HI,

i similar the same problem, I whant to setup server based ssl auth, but when i try to 
configure vew the webgui the hhtps conntector, tomcat will not start anymore.  Can cou 
give me your server.xml file, so ican compair eit whith my one ?



-Original Message-
From: POLO ARAUJO, JAVIER [mailto:[EMAIL PROTECTED] 
Sent: Freitag, 30. Juli 2004 10:26
To: [EMAIL PROTECTED]
Subject: Tomcat 5.X  SSL config


Hi! I have a problem when triying to configure Tomcat 5.X (under windows XP) to handle 
SSL and digital certificate. I have a server certificate (it's valid), so I just 
import it to my keystore and follow the instructions to modify the file server.xml 
(just change the keystoreFile, keystorePass and clientAuth). The problem is that, when 
I access to http://localhost:8443, the box where I can choose my client certificate 
pops up empty (I have a valid client certificate in my browser) so I can't choose my 
client browser. 

First, I though it was a browser's config problem but using mozilla happends the same 
thing. The most curious thing is that, with the same keystore and using other 
app-server (Oracle's OC4J) it works fine (I can choose my client certificate), so I 
think it's a Tomcat problem, but I don't know what!

Thanks a lot,

Javier Polo.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]