Thanks Felix for your reply.
We will try adding new method to our custom implementation and check it.
I am not sure about the reason for using custom implementation.

-----Original Message-----
From: Felix Schumacher [mailto:felix.schumac...@internetallee.de] 
Sent: Monday, June 13, 2016 5:38 PM
To: Tomcat Users List
Subject: RE: FW: Tomcat 6.0.45 - Problem in creating the socket.



Am 13. Juni 2016 08:01:51 MESZ, schrieb "Radha Krishna Meduri -X (radmedur - 
HCL TECHNOLOGIES LIMITED at Cisco)" <radme...@cisco.com>:
>Thanks Felix for your reply. Yes the connect has defined properly.
>
><Connector
>  port="443" protocol="HTTP/1.1" SSLEnabled="true"
>  maxSavePostSize="-1"
>  maxPostSize="20971520"
>  maxThreads="150" scheme="https" secure="true"
>  minSpareThreads="25" maxSpareThreads="75"
>  enableLookups="false" disableUploadTimeout="true"
>  acceptCount="100" URIEncoding="UTF-8"
>  sslProtocol="TLS" server=" "
>  clientAuth="false"
>  keystoreType="PKCS11"
>SSLImplementation="org.apache.tomcat.util.net.jsse.XXXSSLImplementation"
>  ciphers="TLS_DHE_RSA_WITH_AES_128_CBC_SHA,
>TLS_DHE_DSS_WITH_AES_128_CBC_SHA,
>SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA" />
>
>Above SSL Implementation is custom implantation based on NSS/JSS. As I 
>said same implementation works fine with 6.0.37.

Have you tried to recompile your own implementation with the current tomcat 
source code? The class JSSEImplementation was changed between 6.0.37 and 6.0.45 
(the overridden method getServerSocketFactory has been added. )

What is the reason for your own implementation, why can't you use the tomcat 
ones? 

Regards,
Felix 

>
>Thanks
>Radhakrishna
>
>-----Original Message-----
>From: Felix Schumacher [mailto:felix.schumac...@internetallee.de]
>Sent: Monday, June 13, 2016 11:07 AM
>To: Tomcat Users List
>Subject: Re: FW: Tomcat 6.0.45 - Problem in creating the socket.
>
>
>
>Am 13. Juni 2016 07:25:54 MESZ, schrieb "Radha Krishna Meduri -X 
>(radmedur - HCL TECHNOLOGIES LIMITED at Cisco)" <radme...@cisco.com>:
>>Anyone can help on this?
>
>Could you explain a bit more, how you configured the connector/ssl 
>implementation?
>
>Perhaps post a snippet of the server.xml, or where you got the nss/jss?
>
>Thanks,
>Felix
>
>>
>>-----Original Message-----
>>From: Radha Krishna Meduri -X (radmedur - HCL TECHNOLOGIES LIMITED at
>>Cisco)
>>Sent: Friday, June 10, 2016 7:12 PM
>>To: users@tomcat.apache.org
>>Subject: Tomcat 6.0.45 - Problem in creating the socket.
>>
>>Hi,
>>We are trying to upgrade to 6.0.45 from 6.0.37.
>>Tomcat starting fine, but while creating the socket we are getting 
>>following exception.
>>
>>For SSL implementation, we are using NSS/JSS from Mozilla.
>>The SSL implementation works fine with 6.037, but failing with 45.
>>Do you have any idea whether we have to modify SSL implementation to 
>>reflect new Tomcat changes?
>>
>>org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler
>process
>>SEVERE: Error reading request, ignored
>>java.lang.ClassCastException:
>>com.sun.net.ssl.internal.ssl.SSLSocketImpl cannot be cast to 
>>org.mozilla.jss.ssl.SSLSocket at 
>>org.apache.tomcat.util.net.jsse.XXXSSLImplementation.getSSLSupport(XXX
>>S
>>SLImplementation.java:51)
>>at
>>org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.proces
>>s
>>(Http11Protocol.java:606)
>>at
>>org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:504)
>>        at java.lang.Thread.run(Unknown Source)
>>
>>Thanks
>>Radhakrishna
>>
>>---------------------------------------------------------------------
>>To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>>For additional commands, e-mail: users-h...@tomcat.apache.org
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>For additional commands, e-mail: users-h...@tomcat.apache.org
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>For additional commands, e-mail: users-h...@tomcat.apache.org
>>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

  • Tom... Radha Krishna Meduri -X (radmedur - HCL TECHNOLOGIES LIMITED at Cisco)
    • ... Radha Krishna Meduri -X (radmedur - HCL TECHNOLOGIES LIMITED at Cisco)
      • ... Felix Schumacher
        • ... Radha Krishna Meduri -X (radmedur - HCL TECHNOLOGIES LIMITED at Cisco)
          • ... Felix Schumacher
            • ... Radha Krishna Meduri -X (radmedur - HCL TECHNOLOGIES LIMITED at Cisco)
              • ... Radha Krishna Meduri -X (radmedur - HCL TECHNOLOGIES LIMITED at Cisco)

Reply via email to