Enabling Tomcat to be FIPS compliant.

2016-05-15 Thread Nikitha Benny
Hello Everyone, I am using JRE 1.8.060 and tomcat 7.00.068 ,after enabling the FIPS mode and performing the steps to create a certificate(PKCS12 format). I was able to access the tomcat home page using HTTPS But when I was using the same JRE 1.8.060 with tomcat 7.00.069 and then enabling the

Re: EOS for Apache Tomcat Versions

2015-11-17 Thread Nikitha Benny
Thank you Mark :) On Tue, Nov 17, 2015 at 1:05 PM, Mark Thomas <ma...@apache.org> wrote: > On 17/11/2015 05:23, Nikitha Benny wrote: > > Hello, > > > > I am not sure as to where to post this question, so I am posting it here. > > > > Please let

EOS for Apache Tomcat Versions

2015-11-16 Thread Nikitha Benny
Hello, I am not sure as to where to post this question, so I am posting it here. Please let me know the End of Support (EOS) dates for: Apache Tomcat version 7.0.62 Apache Tomcat version 7.0.65 Apache Tomcat version 8.0.23 Apache Tomcat version 8.0.28 Kindly reply. Thanks & Regards, Nikitha

Blank page when browsing to Tomcat page

2015-09-01 Thread Nikitha Benny
Hi All, Tomcat stopped working (blank page when browsing to the website using firefox). Checking in the catalina.2015-04-21.log on one of the problematic servers, following messages were seen : *Apr 21, 2015 11:35:11 AM org.apache.catalina.startup.TldConfig tldScanJar* *WARNING: Failed to

How to deal with LogJam Vulnerability?

2015-08-25 Thread Nikitha Benny
Hi All, I am using Tomcat version 7.00.062 supported on JRE 8u45. How do i disable the LogJam Vulnerability? I have added a line in the java.security file of the JRE. jdk.tls.disabledAlgorithms=DH Is this good enough? Or do we need to add DiffieHelmann also? jdk.tls.disabledAlgorithms=DH,

Re: FIPS compliancy on Tomcat 7.00.062

2015-08-05 Thread Nikitha Benny
authentication certificate that you don't have* ** We have set the client authentication to False, so it does not need any client authorized certificate. Regards, Nikitha On Wed, Aug 5, 2015 at 10:07 AM, Nikitha Benny nikki.be...@gmail.com wrote: But still Tomcat does not run

Re: FIPS compliancy on Tomcat 7.00.062

2015-08-05 Thread Nikitha Benny
Hi Mark, My server is not on a public domain. How can i verify the setup which is on a private network? Regards, Nikitha On Wed, Aug 5, 2015 at 2:14 PM, Mark Thomas ma...@apache.org wrote: On 05/08/2015 07:32, Nikitha Benny wrote: Hi Mark, When I try to run Tomcat on the https server

Re: FIPS compliancy on Tomcat 7.00.062

2015-08-05 Thread Nikitha Benny
Benny nikki.be...@gmail.com wrote: Hi Mark, My server is not on a public domain. How can i verify the setup which is on a private network? Regards, Nikitha On Wed, Aug 5, 2015 at 2:14 PM, Mark Thomas ma...@apache.org wrote: On 05/08/2015 07:32, Nikitha Benny wrote: Hi Mark

Re: FIPS compliancy on Tomcat 7.00.062

2015-08-05 Thread Nikitha Benny
, Nikitha Benny nikki.be...@gmail.com wrote: Hi Mark, Sanaullah, Thank you for your valuable suggestion. I just ran the openssl s_client scan, and it looks like the server side is running fine on *TLSv1.2* Protocol. [root]## *openssl s_client -connect 16.183.93.84:8444 http

FIPS compliancy on Tomcat 7.00.062

2015-08-04 Thread Nikitha Benny
Hello All, We are working on Tomcat 7.00.062 with java 1.08.045. We require to configure FIPS compliancy on the Tomcat. We were successful in configuring FIPS compliancy on java 1.08.045. A keystore file has already been created for Tomcat. When we run the Tomcat 7.00.062 with the FIPS

Re: FIPS compliancy on Tomcat 7.00.062

2015-08-04 Thread Nikitha Benny
. Any clue as to why this happens? The protocol I am using is* org.apache.coyote.http11.Http11Protocol.* Could it be because I am not using an APR connector protocol? Regards, Nikitha On Tue, Aug 4, 2015 at 2:37 PM, Mark Thomas ma...@apache.org wrote: On 04/08/2015 09:30, Nikitha Benny wrote

Re: FIPS compliancy on Tomcat 7.00.062

2015-08-04 Thread Nikitha Benny
But still Tomcat does not run on the https port. As in, when we run Tomcat on the https server port it does not display the page. Where as it goes through fine on the http port. The url opens. On Tue, Aug 4, 2015 at 6:18 PM, Mark Thomas ma...@apache.org wrote: On 04/08/2015 13:19, Nikitha

Unable to start service on Windows (Tomcat version 8.00.023)

2015-07-14 Thread Nikitha Benny
Hi All, I have installed java JRE version 1.07.079 and Tomcat version 8.00.023. And it installs and runs fine on all unix platforms (Linux_x64, Linux_x86, Solaris and HP-UX). Now when it comes to Windows (both x86 and x64), Tomcat installs fine but does not run. Also logs are not being thrown.

Is Tomcat 7.0.62 vulnerable to these issues: CVE-2007-6750/CVE-2009-5111

2015-06-25 Thread Nikitha Benny
Hi, I am confused regarding the 2 security issues CVE-2007-6750 and CVE-2009-5111. Can they be tracked to CVE-2012-5568? According to CVE-2012-5568, I understand that this is not a vulnerability in Tomcat. Please confirm. When Tomcat 7.0.62 was scanned using McAfee Vulnerability Manager Tool,