Gaël Sorry, I am so lazy I did not change the names. I will change it next time. Yes, I am working on Windows. All of the command are translated into Windows commands and there is no error after I fixed some commands and type errors. The problem is that Microsoft Internet Explore and Netscape now are serious about the Root Trust Authorities. Now both of the browsers are not working with the procudure you posted. I am looking for the procedure with CAcert.org. It is free to get their certificates for a server and a client. I believe the browsers and the Tomcat really talked, they failed because the root authority problems. The error # on Netscape is 8182. If you have an Openssl solution based on you procedure, that will be great. Otherwise we have to ask help from CAcert.org. As you know I already typed all commands into Window's Batch file. It is easy to make a completely automatical program to set up everything. If you will work on OPenssl, I would assist with you to make the auto-configure program both on Windows and on Linux. That will be contribute to this community a lot. Right? Thank you again. Sorry about that again. Frank Peng. -----Original Message----- From: Gaël Lams <[EMAIL PROTECTED]> To: Tomcat Users List <users@tomcat.apache.org> Sent: Fri, 16 Jun 2006 13:48:03 +0200 Subject: Re: Tomcat SSL, after clientAuth="false" worked, how to set up to "true"?
> Now, in this procedure, there are 3 aliases, itcilo_ca, map-test and > santiago, which I cannot understand. imagination please: map-test was the name of my host at that time, santiago was the name of one of the users used for the testing, itcilo is the acronym of my organization, that's why I named my certificate authority itcilo_ca ;-) > There already has an alias "tomcat" inside the keystore. Should we use it? > .... > P.S. I have created ,BAT file for each command. .... I wrote what worked for me on my environment (SuSe 9.3, JRE 1.5, Tomcat 5.5.x). You give no indication on the OS/Tomcat version/.... of your system but you are talking about BAT file, so I imagine it's windows, isn't it? I've no idea whether what I did could work on Windows, it should work on linux-based distribution. Anyway you really should try to read again what I wrote and understand what I'm trying to do, because I noticed a few typing mistakes in what I wrote, so copy-paste will not work. Also modify it to correspond to your system (giving name that makes sense to you). Kind regards Gaël
