-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 James,
On 1/16/14, 6:18 PM, James H. H. Lampert wrote: > Christopher Schultz wrote: >> That is always true. But you don't need a certificate to create a >> CSR. > <shrug> If Keytool and the Java Keystore format even recognize any > difference between the concepts of "keypair" and "self-signed > certificate," it would be news to me. <shrug> > > Speaking of one who regularly installs (and secures) Tomcat on > AS/400s (in fact, that's the only platform I can recall EVER > personally installing it on, because I have colleagues who know how > to do it on other platforms): The messes people can make for > themselves by misunderstanding the subtleties of Keytool are > nothing, compared to the mess people can make for themselves trying > to use IBM's Digital Certificate Manager to secure Tomcat on their > 400s (hint: DCM and Tomcat are completely incompatible with each > other). :) Give me OpenSSL any day of the week. ;) - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJS2GrbAAoJEBzwKT+lPKRYe4AP/i12by+gfG8QzkITOr/Pr5My kKLSmXad3+Cw0Fl1gRjei6hRsZnX7gdvye4MBAVW//z8JhzejXFp20KJmdUDsNE4 EFn/oT7SOTF/Dmga28u/qte8212KIktkxziIMCigoXiXVbQ9Ym4eBdBxlqEtiouc 5lMuGuLfCshGP9xd8NigghLtWS4B06YG6Rc9I8BWPeXj1aPAB8naaHeLlrQvAGeb /urAPZn9R+3Kow0Hs06OqIC06FN4VCIujq6aZ2pIBCe2apQkUC2ftBP50xYkwN5e f9PohTuhE9Sk2H9VzxZqCumy6vEIfTfZtrjw0gbF8e/x9brUOfZ1clIoyyYrjNCa A4a84uGBFrX4wHwLQRT/0biXYz9X61AaMmRBOF3Dvargf5Q+u99PYXBcTWcUTPJA byv8OpywtCBaRcR5DbSSN999JFf8kYOn6DFzcj8xEN/auWQ0AJdLZLZdeNEszwZi WcnDHH9MAFPj4a042sue3en9JAtFT/GA2zlgpx9UW/hzv//MvTxE5UO8Ap7GDw/0 1sHsOk+1yNt21o2LQ/bS3Zn0e9Ad76hiTbdWeoBj80eUpsOH1h6xd+vZ7glYd617 CBlexfEMdifTcVh320gYM2b+NUuN+jtPspp+f9KQSZtti5OnWqQylrBMXVbvUIWE keGqbCCKZlqfQfe485Bf =OZem -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
