RE: SSL, Form Authentication 408 error

session cookies) or (probably more advisable) add the app url to the Manged Sites from the Advanced tab with Always Allow -Original Message- From: Andrew Chapman [mailto:[EMAIL PROTECTED] Sent: 03 May 2005 10:29 To: tomcat-user@jakarta.apache.org Subject: SSL, Form Authentication 408 error

SSL, Form Authentication 408 error

If I set the src of an IFRAME to my web application, which uses Form Authentication and SSL, the server consistently throws back a 408 error in IE when attempting to log in. The same scenario consistently works with Firefox. I suspect there are timing issues with IE, IFRAMEs and Form

Tomcat SSL Client Authentication

Hello I've configured Tomcat SSL Client Authentication with these settings : web.xml ... security-constraint web-resource-collection web-resource-nameEntire Application/web-resource-name url-pattern/*/url-pattern http-methodGET/http-method http-methodPOST/http-method /web-resource

Re: Tomcat SSL Client Authentication

Hi, I believe that the clientAuth needs to be set to true in the server.xml. Jim lercoli wrote: Hello I've configured Tomcat SSL Client Authentication with these settings : web.xml ... security-constraint web-resource-collection web-resource-nameEntire Application/web

Re: Tomcat SSL Client Authentication

Client Authentication Hi, I believe that the clientAuth needs to be set to true in the server.xml. Jim lercoli wrote: Hello I've configured Tomcat SSL Client Authentication with these settings : web.xml ... security-constraint web-resource-collection web

Re: Tomcat SSL Client Authentication

Hi, Sorry if that didn't help. Here's what I have in server.xml (I don't remember if I had to change anything outside of server.xml to enable client authentication): !-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 -- Connector port=8443 className=org.apache.coyote.tomcat5

Re: Tomcat SSL Client Authentication

with clientAuth = true but server certificate window doesn't appear and I get page not found error. - Original Message - From: ohaya [EMAIL PROTECTED] To: Tomcat Users List tomcat-user@jakarta.apache.org Sent: Wednesday, April 27, 2005 12:49 PM Subject: Re: Tomcat SSL Client Authentication

Re: Tomcat SSL Client Authentication

certificate (while instead appears with clientAuth = false). - Original Message - From: Darryl Wilburn [EMAIL PROTECTED] To: Tomcat Users List tomcat-user@jakarta.apache.org Sent: Wednesday, April 27, 2005 3:55 PM Subject: Re: Tomcat SSL Client Authentication What version of TC? I've read

SSL Client authentication against MemoryRealm

Hi, The SSL client authentication doesn't work agains MemoryRealm, because the authentication mechanism passes the DN of the client certificate to the realm after validation for role assignement, but the memory realm don't allow usernames that contains , or = characters. Because the DN contains

SSL mutual authentication problem with Tomcat5

Hello, I'm trying to have a standalone Java client communicate via SSL with a remote Tomcat5 server. I'm setting the two system properties for specifying the SSL trust store path and trust store password. The client is able to successfully communicate via SSL when Tomcat is configured to not

RE: SSL mutual authentication problem with Tomcat5

] Subject: SSL mutual authentication problem with Tomcat5 Hello, I'm trying to have a standalone Java client communicate via SSL with a remote Tomcat5 server. I'm setting the two system properties for specifying the SSL trust store path and trust store password. The client is able to successfully

SSL Client authentication

Hi All, Using jboss-3.2.3-tomact 4.1.29, i've got both server and client authentication fully working. Using the same keystore and with clientAuth set to false, everything works fine, but when i set clientAuth to 'true', the server fails to authenticate my client. My connector in

Re: SSL Client authentication

It sounds like your client is trying to send a self-signed cert (which won't work). The client needs to send a cert that is signed by somebody in the TrustStore. tkassem [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi All, Using jboss-3.2.3-tomact 4.1.29, i've got both server and

Re: 2 way SSL ( client authentication)

in your TrustStore. Amjad Shahrour [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi all, I am trying to implement 2 way SSL ( client authentication) on tomcat 4. I am following all steps. But still have something missing. ( all documentations descrips how to deal

2 way SSL ( client authentication)

Hi all, I am trying to implement 2 way SSL ( client authentication) on tomcat 4. I am following all steps. But still have something missing. ( all documentations descrips how to deal with certificates that are varified by CA). I need to know how to generate a normal self-signed

solution problems with ssl client authentication

Hello, Here's the solution for some major problems, which i expirienced getting client authentication to work. I'll post it to help people save time. It cost me more than a week to get it working and the solution is so simple it can be done in less than half an hour. Problem 1 getting

ssl client authentication drives me crazy

Hello, With apache client authentication was so simple. Now my boss wants to use it for smartcard login and I have to use tomcat with cocoon. Thats why I need the client authentication with ssl to work. But I just can't fix it can anyone please help me. All examples wont work I always get

Re: ssl client authentication drives me crazy

client authentication drives me crazy Date: Tue, 14 Oct 2003 09:33:26 +0200 Hello, With apache client authentication was so simple. Now my boss wants to use it for smartcard login and I have to use tomcat with cocoon. Thats why I need the client authentication with ssl to work. But I just can't

Re: ssl client authentication drives me crazy

[EMAIL PROTECTED] Subject: ssl client authentication drives me crazy Date: Tue, 14 Oct 2003 09:33:26 +0200 Hello, With apache client authentication was so simple. Now my boss wants to use it for smartcard login and I have to use tomcat with cocoon. Thats why I need the client authentication

Re: Tomcat 4 + ssl + client authentication

Client cert verification is done against the TrustStore, not the KeyStore. Tomcat 5 has some improvements for this. Tomcat 4 is still a bit limited. I have no idea what is goin wrong. Can someone tell me how to make this work? Assuming that you don't want to just import the signing cert into

ssl client authentication again

Hello, I've worked around with using apache+mod_ssl, but i'm running in several problems now so please can somebody help me with the next problem: I've always used apache http server for client authenticatien with ssl. I've installed Tomcat now voor mij jsp's. But I'm not able to get the ssl

Re: ssl client authentication again

, I've worked around with using apache+mod_ssl, but i'm running in several problems now so please can somebody help me with the next problem: I've always used apache http server for client authenticatien with ssl. I've installed Tomcat now voor mij jsp's. But I'm not able to get the ssl client

Tomcat 4 + ssl + client authentication

Hi all, I've been searching the internet for 2 days now and still haven't found a solution for my problem. I am trying to set up a Tomcat 4 server running in HTTPS mode, contacted by a client written in Java. The client is using HTTPClient from apache. I have done everything the document at

Re: Tomcat 4 + ssl + client authentication

Kenneth Westelinck [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi all, I've been searching the internet for 2 days now and still haven't found a solution for my problem. I am trying to set up a Tomcat 4 server running in HTTPS mode, contacted by a client written in Java. The

SSL Client authentication: what goes in tomcat-users.xml?

Following the advice from this link http://books.mcgraw-hill.com/betabooks/aug02/taylor/0072225653_ch10.html I tried to get SSL client authentication to work by setting the following entry in tomcat-users.xml: user username=CN=x, OU=y, O=z, L=a, S=b, C=c password= roles=user/ where x,y,z,etc

Re: SSL Client authentication: what goes in tomcat-users.xml?

Christopher Williams [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Following the advice from this link http://books.mcgraw-hill.com/betabooks/aug02/taylor/0072225653_ch10.html I tried to get SSL client authentication to work by setting the following entry in tomcat-users.xml

SSL Client authentication woes

My setup: Windows XP Pro JDK 1.4.1 JWSDP 1.0 I'm hoping to get SSL client authentication working for web services. I set up Tomcat for SSL ages ago and it works fine. However, I run into multiple problems when I attempt to use SSL client authentication. I have enabled client authentication

Re: SSL Client authentication woes

Christopher Williams [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] My setup: Windows XP Pro JDK 1.4.1 JWSDP 1.0 I'm hoping to get SSL client authentication working for web services. I set up Tomcat for SSL ages ago and it works fine. However, I run into multiple problems

SSL client authentication

Hello, I've always used apache http server for client authenticatien with ssl. I've installed Tomcat now voor mij jsp's. But I'm not able to get the ssl client authentication working. The problem is getting my existing certificates working in tomcat. Is apache http server it was very easy. I

Re: SSL client authentication

the ssl client authentication working. The problem is getting my existing certificates working in tomcat. Is apache http server it was very easy. I configured all the stuff in my httpd.conf. I also tried to get tomcat working with keytool. But ther's something I do wrong. I alwas get handshake error

RE: Tomcat SSL client authentication problem with Internet Explore

] Asunto: Re: Tomcat SSL client authentication problem with Internet Explore I'm guessing that you didn't install your CA's cert in MSIE's root certificates. Since Tomcat will ask for certs signed by your CA, if MSIE can't find any (that it can verify the chain with), you get an empty box. Ratón

SSL-CLIENT authentication causes getUserPrincipal() to return null. Any idea why?

My setup: JWSDP 1.2 Windows XP Pro JDK 1.4.2 I want to know who's accessing a certain web page after they've authenticated to Tomcat. No problem if I use BASIC authentication. However, when I use SSL-CLIENT authentication, calling getUserPrincipal() on the incoming Request object returns null

RV: Tomcat SSL client authentication problem with Internet Explore

Hi! I have a problem with Tomcat 4.0.6 and SSL client authentication. When I use the Internet Explorer browser (v6.0) and I try to access the secure URL (for example https://whatever:8043), an empty list of certificates is presented. However, if I use Mozilla 1.4 or Netscape 4.76, the client

Re: Tomcat SSL client authentication problem with Internet Explore

] Hi! I have a problem with Tomcat 4.0.6 and SSL client authentication. When I use the Internet Explorer browser (v6.0) and I try to access the secure URL (for example https://whatever:8043), an empty list of certificates is presented. However, if I use Mozilla 1.4 or Netscape 4.76, the client

Re[4]: Tomcat: SSL client authentication

tried to use what I've found but I'm still having a problem... I'm trying to do SSL client authentication with Tomcat 4.1.18 BB (clientAuth=true). 1. I've generated a client certificate using keytool: keytool -genkey -alias tomcat-cl -keyalg RSA -keystore BB client.keystore 2

Re[2]: Tomcat: SSL client authentication

S.Rogulin wrote in message BB news:[EMAIL PROTECTED] Hello all, Sorry for the previous e-mail. %) This theme was discussed about month ago. I tried to use what I've found but I'm still having a problem... I'm trying to do SSL client authentication with Tomcat 4.1.18 BB (clientAuth=true). 1

Re: Re[2]: Tomcat: SSL client authentication

still having a problem... I'm trying to do SSL client authentication with Tomcat 4.1.18 BB (clientAuth=true). 1. I've generated a client certificate using keytool: keytool -genkey -alias tomcat-cl -keyalg RSA -keystore client.keystore 2. Then I created Certificate Signing Request

Re: Tomcat: SSL client authentication

] wrote in message news:[EMAIL PROTECTED] Hello all, Sorry for the previous e-mail. %) This theme was discussed about month ago. I tried to use what I've found but I'm still having a problem... I'm trying to do SSL client authentication with Tomcat 4.1.18 (clientAuth=true). 1. I've generated

Tomcat: SSL client authentication

Hello all, I'm Best regards, Dmitry. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Tomcat: SSL client authentication

Hello all, Sorry for the previous e-mail. %) This theme was discussed about month ago. I tried to use what I've found but I'm still having a problem... I'm trying to do SSL client authentication with Tomcat 4.1.18 (clientAuth=true). 1. I've generated a client certificate using keytool

Re: SSL client authentication with tomcat 4.1.24

It works! Thank you - Original Message - From: Bill Barker [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, June 07, 2003 5:33 AM Subject: Re: SSL client authentication with tomcat 4.1.24 I believe that the Sun 1.4 JVM ships with the certs for Verisign and Thawte

Re: SSL client authentication with tomcat 4.1.24

is stored on a Gemplus smartcard connected with a USB reader all works fine if I connect to an Apache server with mod_ssl. - Original Message - From: Bill Barker [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, June 07, 2003 5:33 AM Subject: Re: SSL client authentication with tomcat

Re: SSL client authentication with tomcat 4.1.24

. Mario - Original Message - From: Duma Rolando [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Tuesday, June 10, 2003 9:24 AM Subject: Re: SSL client authentication with tomcat 4.1.24 I'm still having trouble with my setup. These are my keystore entries: Tipo keystore

Re: SSL client authentication with tomcat 4.1.24

It works, thanks a lot for your help. - Original Message - From: Mario Ivankovits [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Tuesday, June 10, 2003 9:36 AM Subject: Re: SSL client authentication with tomcat 4.1.24 You have to import the root CA into the java

SSL client authentication with IE 6.0

I'm running Tomcat 4.1.24 standalone with SSL client authentication enabled.Internet Explorer 6.0 when I try to access the server pops up a window that ask me which certificate will be used for client authentication, but the list of certificates is empty! I've tested my browser on apache

SSL client authentication with tomcat 4.1.24

Is there anyone that have a running tomcat 4.1.24 standalone server with SSL and clientAuth=true? My current config doesn't work ( i.e. Internet Explorer doesn't display my personal certificate, Mozilla displays an error message ).I tried with only one SSL connector on port 443 and with also an

RE: SSL client authentication with tomcat 4.1.24

Andy -Original Message- From: Duma Rolando [mailto:[EMAIL PROTECTED] Sent: 06 June 2003 11:31 To: Tomcat Mailing List Subject: SSL client authentication with tomcat 4.1.24 Is there anyone that have a running tomcat 4.1.24 standalone server with SSL and clientAuth=true? My current config

Re: SSL client authentication with tomcat 4.1.24

on this kind of setup. - Original Message - From: Bodycombe, Andrew [EMAIL PROTECTED] To: 'Tomcat Users List' [EMAIL PROTECTED] Sent: Friday, June 06, 2003 12:58 PM Subject: RE: SSL client authentication with tomcat 4.1.24 You need to import your personal certificate into your browser. In IE

Re: SSL client authentication with tomcat 4.1.24

[EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Friday, June 06, 2003 1:40 PM Subject: Re: SSL client authentication with tomcat 4.1.24 I have already imported my certificate.This is correctly showed if I connect to an apache + mod-ssl server with SSLVerifyClient require directive

RE: SSL client authentication with IE 6.0

Duma, the list of certificates is empty! This means that you don't have client certificate in your client machine. -Original Message- From: Duma Rolando [mailto:[EMAIL PROTECTED] Sent: Thursday, June 05, 2003 9:31 AM To: Tomcat Mailing List Subject: SSL client authentication with IE 6.0

Re: SSL client authentication with tomcat 4.1.24

: Duma Rolando [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Friday, June 06, 2003 1:40 PM Subject: Re: SSL client authentication with tomcat 4.1.24 I have already imported my certificate.This is correctly showed if I connect to an apache + mod-ssl server

Re: Tomcat SSL mutual authentication: Nobody's got a clue?

hi, it's true that there is no 'step-by-step' howto for tomcat, but there are many other ssl (and client auth) howtos which you can use for tomcat. the only thing is just a little bit of searching and reading about ssl, CA, X509 certificates, certification chains ... i have succesfully

Re: Tomcat SSL mutual authentication: Nobody's got a clue?

first of all: use jdk1.4.x !!! i found a bug in the old implementatin. if someone is interrested i can search in my archive to describe the bug. here is how to patch the tomcat 4.1.x to handle to make client authentication 'optional': in the java class:

RE: Tomcat SSL mutual authentication: Nobody's got a clue?

:49 To: Tomcat Users List Subject: Re: Tomcat SSL mutual authentication: Nobody's got a clue? first of all: use jdk1.4.x !!! i found a bug in the old implementatin. if someone is interrested i can search in my archive to describe the bug. here is how to patch the tomcat 4.1.x to handle to make

Re: Tomcat SSL mutual authentication: Nobody's got a clue?

. I assume you import the client certificate into the server trustore. How does the server know where to look for this truststore ? Thanks Dave -Original Message- From: joe [mailto:[EMAIL PROTECTED] Sent: 26 March 2003 08:49 To: Tomcat Users List Subject: Re: Tomcat SSL mutual

Tomcat SSL mutual authentication: Nobody's got a clue?

For over 1 week, I've been exploring about this. So far, I got no reply. Is this so professional, so tough that nobody's got a clue? __ Do you Yahoo!? Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop! http://platinum.yahoo.com

Re: Tomcat SSL mutual authentication: Nobody's got a clue?

That about sums it up. We are looking at client certs also. The Tomcat docs say how to turn on client authentication, but there is not much out there on hooking up to a CA and verifying against a CRL. All of that is beyond the scope of this list and dives deep into the realm of JCE. We are

Re: Tomcat SSL mutual authentication: Nobody's got a clue?

Hi, No, the Tomcat docs only says how to turn on the *server* authentication, i.e., how to run Tomcat in SSL mode. It does not mention how to have the client also pass over its certificate to the Web server. You have an idea about how to turn on client cert? --- Norris Shelton [EMAIL

SSL client authentication + LDAP realm / Tomcat 4.1.18

Hello. I try to set up the following features : - Client authentication using client SSL certificates - Client authorization using the JNDI realm, against an iPlanet LDAP directory I first tested a simpler configuration using the LDAP realm with BASIC authentication, and it works fine. The realm

SSL client authentication with mod_ssl+mod_jk

Hi, If somebody has a working client SSL authentication for Apache 1.3.*, mod_ssl/mod_jk, i.e., ajp mounts that require client certificate (SSLVerifyClient require), I'd be very grateful to see the appropriate pieces of configuration files. Thank you. -a -- Aaron Stromas | Tik-tik-tik

Tomcat 4 - SSL - Client Authentication

Hi, I am using Tomcat 4 on a linux system. I am trying to enable SSL with client authentication enabled. I want the client to be the Internet Explorer, running on Win2K, my desktop. I found the following steps on the net and tried. * Create keys on the server * Create

Re: Tomcat 4 - SSL - Client Authentication

Have you checked the permissions to the directory where your keystore is held? The process running the webserver must of course be able to read the keystore. - CB Shiva.Devaguptapu wrote: Hi, I am using Tomcat 4 on a linux system. I am trying to enable SSL with client authentication enabled

RE: Tomcat 4 - SSL - Client Authentication

Yes. Read and write as well. -Original Message- From: Christopher Mark Balz [mailto:[EMAIL PROTECTED]] Sent: Monday, January 20, 2003 2:58 PM To: Tomcat Users List Subject: Re: Tomcat 4 - SSL - Client Authentication Have you checked the permissions to the directory where your keystore

Tomcat 4 - SSL - Client Authentication

Hi, I am using Tomcat 4 on a linux system. I am trying to enable SSL with client authentication enabled. I want the client to be the Internet Explorer, running on Win2K, my desktop. I found the following steps on the net and tried. * Create keys on the server * Create

SSL Client Authentication

Hi all, I have a B2B app that needs optionally the client authentication because not always the client has a certificate, but unfortunately Tomcat apparently doesn't have this option like apache. For this reason I still have apache as my web server and Tomcat as

IIS over SSL + Tomcat authentication problem

the login form page, etc. However, when IIS is configured and accessed using SSL, the Tomcat authentication hangs, i.e. no form page is returned and browser keeps Opening page (The same happens for BASIC authentication.) Is there a way to make it running with IIS+SSL+Tomcat with FORM based

SSL and Authentication

Hello everyone. I have a security-contstraint set up with url-pattern/*/url-pattern and JDBCRealm, and I have SSL configured in server.xml. Both the JDBCRealm and SSL are working, just not quite as I'd like. Currently, when the user first enters my site (/mysite/index.html), he is asked to

Re: SSL and Authentication

I figured out that I'll need to refactor my directory structure and use seperate security-constraints. I'm curious, is there a standard or preferred way to do this? My next step is to integrate Tomcat with Apache, and then an EJB server (perhaps JBoss?)... --Dmitry Dmitry ... [EMAIL

SSL Client authentication

Hi all, I am using SSL client authentication on Tomcat 4.0.1 but I am getting some errors. I've enabled client authentication in server.xml and I've created all the certificates. If somebody has some experience in similar configurations please have a look to the steps I followed and let me know

SSL client authentication

Is there a way to configure Tomcat to allow/disallow access to a web application based on the common name (CN) in an SSL client certificate? I can set clientAuth=true in the server.xml, which works fine, and I know I can read the certificate once I'm in the web application, but I'm looking

Re: SSL Client authentication with standalone Tomcat

Wolfgang Stein [EMAIL PROTECTED] writes: As far as i understand the client-auth handshake, the server sends a list of trusted CAs to the client. This list is take from JAVA_HOME_set_in_your_tomcat\lib\security\cacerts So you have to import your CA-cert into that file, instead of your

RE: SSL Client authentication with standalone Tomcat

Hi, -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Brian Palmer Sent: Tuesday, February 26, 2002 12:58 PM To: [EMAIL PROTECTED] Subject: SSL Client authentication with standalone Tomcat I'm trying to set up for a simple project client

Re: SSL Client authentication with standalone Tomcat

Imagine an online banking system with some thousand clients I can't believe that you have to import each client cert into the keystore file. If you start tomcat with the -Djavax.net.debug=all option you should be able to verify that tomcat initially sends a list of trusted CAs taken from the

RE: SSL Client authentication with standalone Tomcat

Hi Wolfgang, -Original Message- From: Wolfgang Stein [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 26, 2002 3:19 PM To: [EMAIL PROTECTED] Subject: Re: SSL Client authentication with standalone Tomcat Imagine an online banking system with some thousand clients I can't

Reposting: SSL Client authentication with standalone Tomcat

, Wolfgang -Ursprüngliche Nachricht- Von: Brian Palmer [mailto:[EMAIL PROTECTED]] Gesendet: Dienstag, 26. Februar 2002 11:58 An: [EMAIL PROTECTED] Betreff: SSL Client authentication with standalone Tomcat I'm trying to set up for a simple project client-authentication

Re: SSL Client authentication with standalone Tomcat

PROTECTED]] Gesendet: Dienstag, 26. Februar 2002 11:58 An: [EMAIL PROTECTED] Betreff: SSL Client authentication with standalone Tomcat I'm trying to set up for a simple project client-authentication and CA abilities, using standalone tomcat and openssl. I'm not having luck. The short

Help with ssl client authentication

Hi all, and thanks for reading me ... I have read a lot of posts about client authentication with tomcat and i pray to somebody for giving a final solution to this problem in Tomcat 4.0 b7. I mean, could somebody describe all the process (commands used) of the certificates generation (keytool +

SSL client Authentication problem.

hello all, I am testing Tomcat standalone with client authentication on, and getting some odd results. It works fine if client authentication is not turned on (for both IE and Netscape browsers). If I turn on client authentication, Netscape claims that I do not have a personal certificate, and

Re: SSL client authentication with Tomcat

Hi, when you say this feature is not supported in Tomcat 3.x, do you also mean that it is not available either for Apache+Tomcat 3.1? Thanks in advance This feature is not supported in Tomcat 3.x presently, although it is available in Tomcat 4.0 (pre-alpha nightly builds currently available).