CoyoteConnector: What means the attribute 'useURIValidationHack'

2002-12-02 Thread Wolfgang Stein
as Catalina 4.1.12 shows in server.xml: ... ... Thanks in advance, Wolfgang Stein -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Re: Tomcat with SSL and Client certificate

2002-10-17 Thread Wolfgang Stein
ts at hand, but you might try setting the option in ctatlina.bat resp. in the environment var CATALINA_OPTS or so. Cheers, Wolfgang Stein > -Original Message- > From: Frédéric LE MAISTRE [mailto:[EMAIL PROTECTED]] > Sent: Thursday, October 17, 2002 9:45 AM > To: Tomcat Users L

Re: Tomcat with SSL and Client certificate

2002-10-17 Thread Wolfgang Stein
Start Tomcat with the additional option -Djavax.net.debug=all and watch the console. Although you will get a lot of output, it might help you in identifying the problem. Good luck, Wolfgang Stein > -Original Message- > From: Frédéric LE MAISTRE [mailto:[EMAIL PROTECTED]]

Re: I need to run a servlet periodically

2002-10-09 Thread Wolfgang Stein
IllegalStateExceptions at least. As already being said: a) If you need servlet functionality periodically let a cron job do servlet requests periodically b) If you don't need servlet functionality just let a cron job do the job Greetings Wolfgang Stein > -Original Message

Re: Multiple certificates in virtual host setup

2002-10-09 Thread Wolfgang Stein
even '*.tld' ? They might be expensive, but maybe they fit your needs. Good luck, Wolfgang Stein > -Original Message- > From: Donie Kelly [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, October 09, 2002 12:03 PM > To: 'Tomcat Users List' > Subject: Mul

Re: SSL clientAuth="optional" ?!?!?

2002-10-07 Thread Wolfgang Stein
Hi, don't have the spec at hand, but have you already tried something like: ... 401 /IfNoClientCertThenRegister ... ... CONFIDENTIAL ... ... in your web.wml ? You might also use a filter or front controler as an alternative. Cheers, Wolfgang > -Ori

Do two listeners entail double context intialization ?

2002-10-04 Thread Wolfgang Stein
I want to enable non-enrypted HTTP-communication for most servlets of a context, but also enforce HTTPS-communication for SOME servlets of the same context. I remember some postings about multiple connectors entailing multiple context-intialization. But i'm not able to find the postings again. W

Re: Catalina doesn't like JRE, but works fine with JDK

2002-09-11 Thread Wolfgang Stein
comes > with the JDK > and are not included with the JRE. Specifically, it uses the > tools.jar > file included with the JDK. > > -- Jeanfrancois > > > -Original Message- > From: Donie Kelly [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, September 11, 20

SSL on Tomcat standalone not working

2002-09-11 Thread Wolfgang Stein
Just a silly suggestion from my own silly experiences with Tomcat 3: If i typed http:// instead of https:// then i always got some  Maybe that helps Wolfgang > -Original Message- > From: Ratner, Ian [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, September 11, 2002 5:55 PM > To: 'To

Catalina doesn't like JRE, but works fine with JDK

2002-09-11 Thread Wolfgang Stein
I just installed JRE 1.3.1_04 and JDK 1.3.1_04 successively. Pointing JAVA_HOME to JDK for Tomcat 4.1.10 works fine, setting JAVA_HOME to JRE gives the error message: "The JAVA_HOME environment variable is not defined correctly" I found the message often in tomcat-users list but in the contex

RE: Tomcat 3.2.4 slow with Jdk1.4 and SSL

2002-09-10 Thread Wolfgang Stein
riencing a heavy performance problem. I > can't say if it is > a performance decrease, though, since I did not test with > older Jdk's and > jsse (perhaps I should...). Any solutions, hints or > suggestions would be > very welcome! > > greetings > &g

Tomcat 3.2.4 slow with Jdk1.4 and SSL

2002-09-10 Thread Wolfgang Stein
Migrating from Jdk1.3 to Jdk1.4 we encountered a significant performance decrease on SSL-communications (server certs) between Applets and Tomcat 3.2.4. Did anybody experience similar performance losses ? Does this happen because of a low SSL implementation in jdk1.4 ? Did anybody successfull

RE: http session survival

2002-05-30 Thread Wolfgang Stein
on survival > > > Thanks. > > Do you know to what extent it exists/doesn't in tomcat 3? > > Jim > > -Original Message- > From: Wolfgang Stein [mailto:[EMAIL PROTECTED]] > Sent: 30 May 2002 11:12 > To: [EMAIL PROTECTED] > Subject: RE: http sessio

RE: http session survival

2002-05-30 Thread Wolfgang Stein
Tomcat 4.0 provides for http session persistence. Gruss, Wolfgang > -Original Message- > From: Jim Clayson [mailto:[EMAIL PROTECTED]] > Sent: Thursday, May 30, 2002 11:43 AM > To: '[EMAIL PROTECTED]' > Subject: http session survival > > > Hi, > > Does tomcat provide support for htt

OT: RE: oci8 driver problem on Linux

2002-04-25 Thread Wolfgang Stein
h our jdbc-connection (sql-exception: protocol violation). We plan to use a newer jdbc driver. Oracle recommends to upgrade to the *latest* jdbc-driver (see quoting below). Do you have practical experiences that backup your suggestion to use an exact *version matching* driver ? Thanks

Re: SSL Logs

2002-04-19 Thread Wolfgang Stein
Start Tomcat with the additional option (set in tomcat.bat) -Djavax.net.debug=all and watch the console. Gruss, Wolfgang > -Original Message- > From: Todd Lekan [mailto:[EMAIL PROTECTED]] > Sent: Friday, April 19, 2002 12:11 AM > To: '[EMAIL PROTECTED]' > Subject: SSL Logs > > > M

Re: tomcat https security: is it possible to steal sessions?

2002-03-15 Thread Wolfgang Stein
It depends on the circumstances. I believe one widespread risk among others might be the use of self-signed server certs to establish a secure (ssl) communication. If you use self-generated server certs, someone could do a man-in-the-middle-attack, making the client believe to communicate with th

Re: How to Unsubscribe?

2002-03-07 Thread Wolfgang Stein
Try to send send a mail to [EMAIL PROTECTED] Gruss, Wolfgang -- To unsubscribe: For additional commands: Troubles with the list:

RE: Tomcat4 standalone keystore - existing private

2002-02-27 Thread Wolfgang Stein
> Looks like we will be going through apache then. > Or use a utility written in java available with source from http://www.comu.de. It doesn't really import but generates a new keystore containing the cert with priv key. Since you only need one entry for a ssl server cert (alias tomcat) it is

Re: High startup and shutdown time of tomcat 4

2002-02-26 Thread Wolfgang Stein
Hi, the startup time will even increase if you enable a SSL-connector. But you don't have to restart the whole tomcat to restart an application (compared with TC 3.2, don't know 3.3), if you use the manager app instead. You can also enable dynamic servlet reloading during development. I suppose

Re: SSL Client authentication with standalone Tomcat

2002-02-26 Thread Wolfgang Stein
og box to select a client cert from, and sends (?) the users selection back to the server. This choice box was usually empty in MS IE. Read my previous posting "Any success with Tomcat 4.0.2 and client certificates in MS IE ?" Wolfgang Stein wrote: > > As far as i understand the

Reposting: SSL Client authentication with standalone Tomcat

2002-02-26 Thread Wolfgang Stein
ent certificates in MS IE ?" Wolfgang Stein wrote: > > As far as i understand the client-auth handshake, > the server sends a list of trusted CAs to the client. > > This list is take from > \lib\security\cacerts > So you have to import your CA-cert into that file, > i

Re: SSL Client authentication with standalone Tomcat

2002-02-26 Thread Wolfgang Stein
e keystore file only, please let us know. Gruß, Wolfgang Anton Brazhnyk wrote > > I'm not sure its necessary, but I'd import last certificate with > following command: > > keytool -import -trustcacerts -file my.crt -alias tomcat > Wolfgang Stein

Re: SSL Client authentication with standalone Tomcat

2002-02-26 Thread Wolfgang Stein
As far as i understand the client-auth handshake, the server sends a list of trusted CAs to the client. This list is take from \lib\security\cacerts So you have to import your CA-cert into that file, instead of your .keystore . There is no need to import the client cert into cacerts or keystore.

Re: I get an exception java.io.FileNotFoundException: Tomcat 4 ssl

2002-02-22 Thread Wolfgang Stein
Seems you have to much double quotes in th entry keystoreFile=""C:\WINDOWS\Profile\chucka\.keystore" Gruß, Wolfgang > -Ursprüngliche Nachricht- > Von: Chuck Amadi [mailto:[EMAIL PROTECTED]] > Gesendet: Freitag, 22. Februar 2002 14:38 > An: tomcat > Betreff: I get an exception java.io

Any success with Tomcat 4.0.2 and client certificates in MS IE ?

2002-02-22 Thread Wolfgang Stein
MS IE + client certs + Tomcat? Thanks in advance Wolfgang Stein -- To unsubscribe: <mailto:[EMAIL PROTECTED]> For additional commands: <mailto:[EMAIL PROTECTED]> Troubles with the list: <mailto:[EMAIL PROTECTED]>

RE: Tomcat 3.2.2 sometimes slow. Does he DNS lookup ?

2001-11-23 Thread Wolfgang Stein
I meant "It gets faster if the remote client has an entry in Tomcats WINNT\system32\drivers\etc\hosts file. (??!)" Gruß, Wolfgang > -Original Message- > From: Wolfgang Stein [mailto:[EMAIL PROTECTED]] > > My Tomcat is sometimes very slow if > clients

Tomcat 3.2.2 sometimes slow. Does he DNS lookup ?

2001-11-23 Thread Wolfgang Stein
, Wolfgang Stein -- To unsubscribe: <mailto:[EMAIL PROTECTED]> For additional commands: <mailto:[EMAIL PROTECTED]> Troubles with the list: <mailto:[EMAIL PROTECTED]>

RE: Launching subprocess under Tomcat as a Service

2001-10-25 Thread Wolfgang Stein
I encountered some problems on file i/o due the fact that the WINs current working directory differs if tomcat is started as a NT service. HTH Wolfgang Stein > -Original Message- > From: Robert Casto [mailto:[EMAIL PROTECTED]] > Sent: Thursday, October 25, 2001 4:40 AM >

TC4: stopping/starting an application works, reloading does not

2001-10-25 Thread Wolfgang Stein
pping in myapp/WEB-INF/web.xml was already present on the first attempt. Any similar experiences ? Wolfgang Stein

Where are the public keys for tomcat signature files ?

2001-10-22 Thread Wolfgang Stein
How can i verify the signatures for the tomcat binaries ? Thanks in advance Wolfgang

How to disable automatic context loading in Tomcat 4 ?

2001-10-05 Thread Wolfgang Stein
How can I disable automatic context loading AKA 'Automatic Application Deployment' in Tomcat 4 ? Thanks in advance, Wolfgang Stein

RE: multiple instances of tomcat

2001-05-04 Thread Wolfgang Stein
the specific port. If you start tomcat as a NT service you have to modify in each wrapper.properties the var 'wrapper.tomcat_home' analogously Good luck, Wolfgang Stein > -Original Message- > From: Peter Hrastnik [mailto:[EMAIL PROTECTED]] > Sent: Friday, May 04

Deploying a JSP among servlets

2001-03-22 Thread Wolfgang Stein
technology in a quick and dirty manner - which is sufficient for admin purposes :-) I struggled with web.xml for hours without success, but I am a JSP newbie. Thanks in advance, Wolfgang Stein

READ THIS First! Mailing-list archive and good tips

2000-11-08 Thread Wolfgang Stein
To unsubscribe from this list To stop subscription for an alternate account (e.g. [EMAIL PROTECTED]) send an eMail to [EMAIL PROTECTED] Before posting any questions --- + We welcome open discussion of Tomcat issues at both advan

READ THIS First! Mailing-list archive and good tips

2000-11-07 Thread Wolfgang Stein
To unsubscribe from this list To stop subscription for an alternate account (e.g. [EMAIL PROTECTED]) send an eMail to [EMAIL PROTECTED] Before posting any questions --- + We welcome open discussion of Tomcat issues at both advan

READ THIS First! Mailing-list archive and good tips

2000-11-06 Thread Wolfgang Stein
To unsubscribe from this list To stop subscription for an alternate account (e.g. [EMAIL PROTECTED]) send an eMail to [EMAIL PROTECTED] Before posting any questions --- + We welcome open discussion of Tomcat issues at both advan

READ THIS First! Mailing-list archive and good tips

2000-11-02 Thread Wolfgang Stein
To unsubscribe from this list To stop subscription for an alternate account (e.g. [EMAIL PROTECTED]) send an eMail to [EMAIL PROTECTED] Before posting any questions --- + We welcome open discussion of Tomcat issues at both advan

READ THIS First! Mailing-list archive and good tips

2000-10-31 Thread Wolfgang Stein
To unsubscribe from this list To stop subscription for an alternate account (e.g. [EMAIL PROTECTED]) send an eMail to [EMAIL PROTECTED] Before posting any questions --- + We welcome open discussion of Tomcat issues at both advan

READ THIS First! Mailing-list archive and good tips

2000-10-30 Thread Wolfgang Stein
To unsubscribe from this list To stop subscription for an alternate account (e.g. [EMAIL PROTECTED]) send an eMail to [EMAIL PROTECTED] Before posting any questions --- + We welcome open discussion of Tomcat issues at both advan

READ THIS First! Mailing-list archive and good tips

2000-10-27 Thread Wolfgang Stein
To unsubscribe from this list To stop subscription for an alternate account (e.g. [EMAIL PROTECTED]) send an eMail to [EMAIL PROTECTED] Before posting any questions --- + We welcome open discussion of Tomcat issues at both advan

READ THIS First! Mailing-list archive and good tips

2000-10-24 Thread Wolfgang Stein
To unsubscribe from this list To stop subscription for an alternate account (e.g. [EMAIL PROTECTED]) send an eMail to [EMAIL PROTECTED] Before posting any questions --- + We welcome open discussion of Tomcat issues at both advan

READ THIS First! Mailing-list archive and good tips

2000-10-23 Thread Wolfgang Stein
To unsubscribe from this list To stop subscription for an alternate account (e.g. [EMAIL PROTECTED]) send an eMail to [EMAIL PROTECTED] Before posting any questions --- + We welcome open discussion of Tomcat issues at both advan