-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cédric,
On 12/21/12 9:34 AM, Cédric Couralet wrote: >>> >> Thanks Dan - which access log should I look at? all of the >> tomcat logs don't show anything. I've got it configured with APR >> & TCNATIVE >> > > Hello, > > I'm not sure you could get an error page. The ssl dialog takes > place before any http communication. So I don't think tomcat can > send an http response if the certificate is revoked. +1 I don't think you have any control over the page that gets displayed in this event: Tomcat does not even get involved. Either OpenSSL or JSSE will simply refuse the handshake and the (software) client has to report something to the user. Sounds like MSIE does it's usual worthless error reporting. - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEAREIAAYFAlDUhy8ACgkQ9CaO5/Lv0PCXmACfVkGB3b+/yXndeehTg6Hl1GCP C2EAoLbMxP3hv5icouotV46p64nhmbcl =Mvyi -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org