RE: SSL/Verisign Confusion

2003-09-08 Thread Dave Wood
, for example (not free, but $35.00 isn't bad). Also, see http://www.whichssl.org for more good info on the subject. -dave -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Sunday, September 07, 2003 3:43 AM To: Tomcat Users List Subject: Re: SSL/Verisign Confusion Hi

Re: SSL/Verisign Confusion

2003-09-08 Thread Bill Barker
, September 07, 2003 3:43 AM To: Tomcat Users List Subject: Re: SSL/Verisign Confusion Hi Dave, how much does it cost at Verisign, and how long is it valid for? And is this 'openssl' you mentioned a free alternative? Adam On 09/06/2003 03:21 PM Dave Wood wrote: FINALLY! I still don't

Re: SSL/Verisign Confusion

2003-09-07 Thread Adam Hardy
the way. Dave -Original Message- From: Dave Wood [mailto:[EMAIL PROTECTED] Sent: Friday, September 05, 2003 11:40 AM To: Tomcat Users List Subject: RE: SSL/Verisign Confusion Well, after all this, I just discovered that VeriSign will basically let you start over if it's within 30 days

Re: SSL/Verisign Confusion

2003-09-07 Thread Christopher Williams
, September 07, 2003 10:43 AM Subject: Re: SSL/Verisign Confusion Hi Dave, how much does it cost at Verisign, and how long is it valid for? And is this 'openssl' you mentioned a free alternative? Adam On 09/06/2003 03:21 PM Dave Wood wrote: FINALLY! I still don't know what I did wrong

RE: SSL/Verisign Confusion

2003-09-06 Thread Dave Wood
how I got in that messed up state. Thanks, Dave -Original Message- From: Christopher Williams [mailto:[EMAIL PROTECTED] Sent: Friday, September 05, 2003 9:43 AM To: Tomcat Users List Subject: Re: SSL/Verisign Confusion Have you thought of manipulating the keystore programmatically? Here's

Re: SSL/Verisign Confusion

2003-09-05 Thread Bill Barker
, September 04, 2003 11:06 PM To: [EMAIL PROTECTED] Subject: Re: SSL/Verisign Confusion Firstly, it looks like you should wipe you keystore and start again. To use a VS cert with Tomcat, the two options I know are: 1) Follow the instructions at http://www.comu.de/docs/tomcat_ssl.htm. 2

RE: SSL/Verisign Confusion

2003-09-05 Thread Dave Wood
Barker Sent: Friday, September 05, 2003 12:18 AM To: [EMAIL PROTECTED] Subject: Re: SSL/Verisign Confusion Dave Wood [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Thanks Bill. I think this highlights something I'm really not understanding... Didn't I generate an important private key

RE: SSL/Verisign Confusion

2003-09-05 Thread Jay Garala
Wood [mailto:[EMAIL PROTECTED] Sent: Friday, September 05, 2003 1:04 AM To: Tomcat Users List Subject: RE: SSL/Verisign Confusion Thanks Bill. I think this highlights something I'm really not understanding... Didn't I generate an important private key somewhere along the line that I can't just

RE: SSL/Verisign Confusion

2003-09-05 Thread Dave Wood
keys as things that you can work with directly. Thanks again, Dave -Original Message- From: Jay Garala [mailto:[EMAIL PROTECTED] Sent: Friday, September 05, 2003 7:12 AM To: 'Tomcat Users List' Subject: RE: SSL/Verisign Confusion Try the Java keytool help: http://java.sun.com/j2se/1.4.2

RE: SSL/Verisign Confusion

2003-09-05 Thread Jay Garala
NOTE: You cannot export private key from keystore. -Original Message- From: Dave Wood [mailto:[EMAIL PROTECTED] Sent: Friday, September 05, 2003 10:32 AM To: Tomcat Users List Subject: RE: SSL/Verisign Confusion Thanks. With the exception of the openssl doc, I've been over these quite

RE: SSL/Verisign Confusion

2003-09-05 Thread Dave Wood
/Verisign Confusion NOTE: You cannot export private key from keystore. -Original Message- From: Dave Wood [mailto:[EMAIL PROTECTED] Sent: Friday, September 05, 2003 10:32 AM To: Tomcat Users List Subject: RE: SSL/Verisign Confusion Thanks. With the exception of the openssl doc, I've been

RE: SSL/Verisign Confusion

2003-09-05 Thread Jay Garala
Hmm.. Did you create the PK in Tomcat's keystore or your JDK's keystore? Try the keyclone? Clone your 'company' to 'tomcat'. -Original Message- From: Dave Wood [mailto:[EMAIL PROTECTED] Sent: Friday, September 05, 2003 11:07 AM To: Tomcat Users List Subject: RE: SSL/Verisign Confusion

RE: SSL/Verisign Confusion

2003-09-05 Thread Dave Wood
PROTECTED] Sent: Friday, September 05, 2003 9:21 AM To: 'Tomcat Users List' Subject: RE: SSL/Verisign Confusion Hmm.. Did you create the PK in Tomcat's keystore or your JDK's keystore? Try the keyclone? Clone your 'company' to 'tomcat'. -Original Message- From: Dave Wood [mailto:[EMAIL

RE: SSL/Verisign Confusion

2003-09-05 Thread Jay Garala
Is public the one returned from Versign or is it the Verisign's CA Cert? If you want try following to see if the cert exists within JDK trusted calist: Execute from jdk\jre\lib\security Directory keytool -list -keystore cacerts -storepass changeit Jay -Original Message- From: Dave

RE: SSL/Verisign Confusion

2003-09-05 Thread Lawrence, Gabriel
Message- From: Dave Wood [mailto:[EMAIL PROTECTED] Sent: Friday, September 05, 2003 8:07 AM To: Tomcat Users List Subject: RE: SSL/Verisign Confusion I realize you can't do this with keytool. Is there no way to do it at all? I'm beginning to think I might be totally hosed here. Thanks, Dave

RE: SSL/Verisign Confusion

2003-09-05 Thread Dave Wood
So it's possible then...? That's promising. Thanks (in advance) very much. -dave -Original Message- From: Lawrence, Gabriel [mailto:[EMAIL PROTECTED] Sent: Friday, September 05, 2003 10:13 AM To: Tomcat Users List Subject: RE: SSL/Verisign Confusion I'm working on a tool to pull out

Re: SSL/Verisign Confusion

2003-09-05 Thread John Turner
it finished. Kind of funny how just as I'm getting around to a project that has been on my plate all week someone else needs it too ;-) -gabe -Original Message- From: Dave Wood [mailto:[EMAIL PROTECTED] Sent: Friday, September 05, 2003 8:07 AM To: Tomcat Users List Subject: RE: SSL/Verisign

Re: SSL/Verisign Confusion

2003-09-05 Thread Christopher Williams
- From: Jay Garala [EMAIL PROTECTED] To: 'Tomcat Users List' [EMAIL PROTECTED] Sent: Friday, September 05, 2003 3:36 PM Subject: RE: SSL/Verisign Confusion NOTE: You cannot export private key from keystore. -Original Message- From: Dave Wood [mailto:[EMAIL PROTECTED] Sent: Friday

RE: SSL/Verisign Confusion

2003-09-05 Thread Dave Wood
in that messed up state. Thanks, Dave -Original Message- From: Christopher Williams [mailto:[EMAIL PROTECTED] Sent: Friday, September 05, 2003 9:43 AM To: Tomcat Users List Subject: Re: SSL/Verisign Confusion Have you thought of manipulating the keystore programmatically? Here's what

Re: SSL/Verisign Confusion

2003-09-04 Thread Bill Barker
Firstly, it looks like you should wipe you keystore and start again. To use a VS cert with Tomcat, the two options I know are: 1) Follow the instructions at http://www.comu.de/docs/tomcat_ssl.htm. 2) Using openssl or otherwise, convert your cert+key to a pkcs12 file, and use that as your keystore

RE: SSL/Verisign Confusion

2003-09-04 Thread Dave Wood
Sent: Thursday, September 04, 2003 11:06 PM To: [EMAIL PROTECTED] Subject: Re: SSL/Verisign Confusion Firstly, it looks like you should wipe you keystore and start again. To use a VS cert with Tomcat, the two options I know are: 1) Follow the instructions at http://www.comu.de/docs/tomcat_ssl.htm. 2