Turning on debugging in Tomcat 5.5

2005-10-06 Thread James Rome
Most of the installed Tomcat classes have something like container.isDebugEnabled() {...} How do I enable these debug statements in Tomcat 5.5? Thanks, Jim - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-

Certificate authentication

2005-10-04 Thread James Rome
I have looked at the source code and it seems to me that presented client certificates are only checked for their validity dates, and NOT for whether they have been revoked. I am able to access my Tomcat site with a revoked certificate. It is easy to implement OCSP and/or CRL checking, so I implem

Realms and certificates

2005-09-28 Thread James Rome
None of the standard realms do certificates properly. For example, o.a.c.authenticator.SSLAuthenticator.java does not check to see if a certificate has been revoked. The LDAP realm compares the presented certificate to the one in the LDAP which puts a burden on the LDAP to unpublish revoked certifi

SSL error -12229

2003-11-03 Thread James Rome
I have installed Tomcat5 on Solaris in the Sun jwdsp-1.3. I created the certificates as per the instructions in the server.xml file, and uncommented the ssl server section. But when I try to connect to it, after the server presents me with its certificate, I get "error -12229" What is wrong? -