Re: SSLVerifyClient="optionalNoCA" stops working in tomcat 8.0.32?

2016-06-17 Thread Florian Kleedorfer
Hi Christopher, Thanks for looking into this! Am 17.06.2016 um 00:01 schrieb Christopher Schultz: clientAuth="want"? Note that this is only documented for the JSSE-based connectors, not the APR connector. Yes, thanks - I think that's garbage left in there from my attempts to use BIO/NIO

Re: [tomcat-users] Re: SSLVerifyClient="optionalNoCA" stops working in tomcat 8.0.32?

2016-06-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jason, On 6/16/16 2:45 PM, Jason Pyeron wrote: >> -Original Message- From: Mark Thomas Sent: Thursday, June >> 16, 2016 14:39 To: Tomcat Users List Subject: [tomcat-users] Re: >> SSLVerifyClient="optionalNoCA" st

Re: SSLVerifyClient="optionalNoCA" stops working in tomcat 8.0.32?

2016-06-16 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Florian, On 5/19/16 12:49 PM, Florian Kleedorfer wrote: > TL;DR: The TLS handshake with client authentication using > self-signed client certificates (using APR/openssl) stopped working > from tomcat 8.0.30 to tomcat 8.0.32. Cause is suspected in a

RE: [tomcat-users] Re: SSLVerifyClient="optionalNoCA" stops working in tomcat 8.0.32?

2016-06-16 Thread Jason Pyeron
> -Original Message- > From: Mark Thomas > Sent: Thursday, June 16, 2016 14:39 > To: Tomcat Users List > Subject: [tomcat-users] Re: SSLVerifyClient="optionalNoCA" > stops working in tomcat 8.0.32? > > On 16/06/2016 11:29, Florian Kleedorfer wrote: >

Re: SSLVerifyClient="optionalNoCA" stops working in tomcat 8.0.32?

2016-06-16 Thread Mark Thomas
On 16/06/2016 11:29, Florian Kleedorfer wrote: > Hi! > > There was no response to my request on this list, so I filed a bug: > > https://bz.apache.org/bugzilla/show_bug.cgi?id=59616 > > However, this bug does not seem to get handled by the dev team. If you want a guaranteed response time,

Re: SSLVerifyClient="optionalNoCA" stops working in tomcat 8.0.32?

2016-06-16 Thread Florian Kleedorfer
Hi! There was no response to my request on this list, so I filed a bug: https://bz.apache.org/bugzilla/show_bug.cgi?id=59616 However, this bug does not seem to get handled by the dev team. My problem is that our application stopped working with more recent tomcat versions. We can deal with

SSLVerifyClient="optionalNoCA" stops working in tomcat 8.0.32?

2016-05-19 Thread Florian Kleedorfer
Hi! TL;DR: The TLS handshake with client authentication using self-signed client certificates (using APR/openssl) stopped working from tomcat 8.0.30 to tomcat 8.0.32. Cause is suspected in a change of openssl or APR between versions. # Context: We're using tomcat 8 in a setting where the