Re: keyPass and keystorePass

2023-05-23 Thread Mark Thomas
On 23/05/2023 18:57, James H. H. Lampert wrote: According to the Tomcat 7 configuration reference, keystorePass, if not specified, defaults to the value (specified or default) of keyPass. The Tomcat 8.5 configuration reference doesn't say this; is it still true? No. If certificateKeystorePas

keyPass and keystorePass

2023-05-23 Thread James H. H. Lampert
According to the Tomcat 7 configuration reference, keystorePass, if not specified, defaults to the value (specified or default) of keyPass. The Tomcat 8.5 configuration reference doesn't say this; is it still true? -- JHHL - T

Re: AW: Too many certificates in chain?!? Help!

2023-05-23 Thread James H. H. Lampert
On 5/23/23 10:02 AM, Rob Sargent wrote: Does pathLen:0 mean "no limit" or "no go"? Well given that the "Basic Constraints" are exactly the same, across the board, in *both* the keystores that worked fine and the keystore that blew up, I don't think that's a factor. And the fact that the keys

Re: AW: Too many certificates in chain?!? Help!

2023-05-23 Thread Rob Sargent
On 5/23/23 10:13, James H. H. Lampert wrote: On 5/23/23 8:31 AM, Christopher Schultz wrote: Can you dump the whole cert (e.g. keytool -list -v -alias 'certname') for each cert and see if any of the certificates specify a maximum chain length somewhere? Evidently, it's an extension to the X.5

Re: AW: Too many certificates in chain?!? Help!

2023-05-23 Thread James H. H. Lampert
On 5/23/23 8:31 AM, Christopher Schultz wrote: Can you dump the whole cert (e.g. keytool -list -v -alias 'certname') for each cert and see if any of the certificates specify a maximum chain length somewhere? Evidently, it's an extension to the X.509 spec: Comparing one that worked with one tha

Re: How to setup client certificate based authentication in Tomcat 9

2023-05-23 Thread Christopher Schultz
Omkar, On 5/3/23 00:28, Patkar Omkar Anant wrote: The server A where tomcat is running... it hosts a REST based application (BPMN based called Camunda ... it’s a 3rd party application). For e.g., when an application wants to trigger a workflow or BPMN deployed in Camunda, then they will fire t

Re: AW: Too many certificates in chain?!? Help!

2023-05-23 Thread Christopher Schultz
James, On 5/18/23 16:01, James H. H. Lampert wrote: On 5/18/23 12:18 AM, Thomas Hoffmann (Speed4Trade GmbH) wrote: Which version of tomcat do you use? Is the stack trace truncated in your mail? Is there a "caused by ..." further down the stacktrace? It looks like the error is thrown deeper i

Re: Rate Limiting support in Tomcat 9.x

2023-05-23 Thread Mark Thomas
On 22/05/2023 21:16, Amit Pande wrote: Hello, https://tomcat.apache.org/ I see rate limiting support added in Tomcat 10.1.9 . (Side note: The Apache Tomcat Project is proud to announce the release of version 10.1.8 of Apache Tomcat - I think it should be 10.1.9) Thanks. The typo has been fi