-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Sunaullah,
On 7/26/14, 4:50 AM, Sanaullah wrote:
> I tried that configuration but getting errrors.
I just want you to know that you haven't been forgotten: I'm on
vacation for a bit but I'd really like to take a look at this issue
when I return.
In the meantime, feel free to check out the tcnative code if you want
to see what is going on, or someone else could chime-in and give an
opinion (or -- *gasp* -- a proposed patch!).
Thanks,
- -chris
> NFO: Loaded APR based Apache Tomcat Native library 1.1.30 using APR
> version 1.4.6. Jul 23, 2014 3:06:40 AM
> org.apache.catalina.core.AprLifecycleListener init INFO: APR
> capabilities: IPv6 [true], sendfile [true], accept filters [false],
> random [true]. Jul 23, 2014 3:06:40 AM
> org.apache.catalina.core.AprLifecycleListener lifecycleEvent
> SEVERE: Failed to initialize the SSLEngine.
> org.apache.tomcat.jni.Error: 70023: This function has not been
> implemented on this platform at
> org.apache.tomcat.jni.SSL.initialize(Native Method) at
> sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
>
>
at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>
>
at java.lang.reflect.Method.invoke(Method.java:606)
> at
> org.apache.catalina.core.AprLifecycleListener.initializeSSL(AprLifecycleListener.java:270)
>
>
at
> org.apache.catalina.core.AprLifecycleListener.lifecycleEvent(AprLifecycleListener.java:124)
>
>
at
> org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:117)
>
>
at
> org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:90)
>
>
at
> org.apache.catalina.util.LifecycleBase.setStateInternal(LifecycleBase.java:402)
>
>
at
> org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:99)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:638) at
> org.apache.catalina.startup.Catalina.load(Catalina.java:663) at
> sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
>
>
at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>
>
at java.lang.reflect.Method.invoke(Method.java:606)
> at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:280)
> at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:454)
>
>
>
> On Fri, Jul 25, 2014 at 8:05 PM, Christopher Schultz <
> ch...@christopherschultz.net> wrote:
>
> Sanaullah,
>
> On 7/25/14, 9:16 AM, Sanaullah wrote:
>>>> httpd is working with HSM with addition of parameter
>>>> SSLCryptoDevice=LunaCA but when i try the same parameter in
>>>> tomEE. TomEE don't recognized this parameters.
>>>>
>>>> WARNING: [SetAllPropertiesRule]{Server/Service/Connector}
>>>> Setting property 'SSLCryptoDevice' to 'LunaCA3' did not find
>>>> a matching property.
>>>>
>>>> Any Idea?
>
> Try setting SSLEngine="LunaCA3" instead of SSLEngine="on" in your:
>
> <Listener class="org.apache.catalina.core.AprLifecycleListener"
> SSLEngine="on" />
>
> -chris
>
>>>> On Thu, Jul 10, 2014 at 7:40 PM, Christopher Schultz <
>>>> ch...@christopherschultz.net> wrote:
>>>>
>>>> Sanaullah,
>>>>
>>>> On 7/10/14, 4:19 AM, Sanaullah wrote:
>>>>>>> is there a way i can use pkcs11 supported
>>>>>>> SmartCard/token when using APR based SSL Connector in
>>>>>>> tomcat ? PEM encoded certificates and keys are stored
>>>>>>> in smartcard.
>>>>>>>
>>>>>>> I know BIO/NIO connectors supported token/HSM but I am
>>>>>>> looking for APR based connectors?
>>>>
>>>> I'm no expert at such configurations, but since tcnative/APR
>>>> uses OpenSSL for its crypto engine, then it can do anything
>>>> OpenSSL can do. Have you been able to configure e.g. httpd to
>>>> use this kind of setup? If so, there ought to be a way to
>>>> make it happen using Tomcat's APR connector.
>>>>
>>>> -chris
>>>>>
>>>>> ---------------------------------------------------------------------
>>>>>
>>>>>
>
>>>>>
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>>>>> For additional commands, e-mail:
>>>>> users-h...@tomcat.apache.org
>>>>>
>>>>>
>>>>
>>
>> ---------------------------------------------------------------------
>>
>>
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
>>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=ASDY
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
