Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-30 Thread Chad La Joie
Yep, this is a problem. And, as I said, we don't have keystores, so even if it did pick up the new cert it still wouldn't work for us. jean-frederic clere wrote: OK I have added a new CA using: +++ [EMAIL PROTECTED]:~> $JAVA_HOME/bin/keytool -import -trustcacerts -file ~/CERTS/demoCA/cacert.

Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-29 Thread jean-frederic clere
Chad La Joie wrote: jean-frederic clere wrote: Chad La Joie wrote: Yeah, I know what mod-ssl says, and for most cases it's probably right, however the optional_no_ca option is interesting to us because it provides exactly the functionality that we need; accepting the client cert, putting it

Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-28 Thread Chad La Joie
jean-frederic clere wrote: > Chad La Joie wrote: > >> Yeah, I know what mod-ssl says, and for most cases it's probably right, >> however the optional_no_ca option is interesting to us because it >> provides exactly the functionality that we need; accepting the client >> cert, putting it in a sta

Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-28 Thread jean-frederic clere
Chad La Joie wrote: Yeah, I know what mod-ssl says, and for most cases it's probably right, however the optional_no_ca option is interesting to us because it provides exactly the functionality that we need; accepting the client cert, putting it in a standard place, and allowing our application to

Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-28 Thread Chad La Joie
Yeah, I know what mod-ssl says, and for most cases it's probably right, however the optional_no_ca option is interesting to us because it provides exactly the functionality that we need; accepting the client cert, putting it in a standard place, and allowing our application to do the verification f

Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-28 Thread jean-frederic clere
Chad La Joie wrote: Hey guys, I was wondering if there were any thoughts on this particular suggestion. I hadn't seen anything on the list. BTW: mod-ssl says: +++ In practice only levels none and require are really interesting, because level optional doesn't work with all browsers and level

Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread jean-frederic clere
Chad La Joie wrote: Hey guys, I was wondering if there were any thoughts on this particular suggestion. I hadn't seen anything on the list. Have you tried to use keystoreType="PKCS12" in the connector? Chad La Joie wrote: Good Morning, I work on the Internet2 Shibboleth project and we'

Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: Re: Re: Re: Re: Re: Re: Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: Re: Re: Re: Re: Re: Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: Re: Re: Re: Re: Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: Re: Re: Re: Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: Re: Re: Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: Re: Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread gerencia
su correo ha sido recepcionado. gracias - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: Feature Request: Optional No Cert validation on SSL connector

2005-06-27 Thread Chad La Joie
Hey guys, I was wondering if there were any thoughts on this particular suggestion. I hadn't seen anything on the list. Chad La Joie wrote: > Good Morning, > I work on the Internet2 Shibboleth project and we've run in to an > issue with client cert authentication in a stand alone Tomcat > env

Re: Feature Request

2000-12-29 Thread Nick Bauman
On Thu, 28 Dec 2000, Jon Stevens wrote: > What would be "nice to have" is a feature where the Tomcat HTTPd had the > mod_rewrite module implemented within Java. The issue being that on a live > site, I use mod_rewrite to make the URL's pretty or different (or both) and > I would want to have the

Re: Feature Request

2000-12-29 Thread Jon Stevens
on 12/29/2000 4:29 AM, "Paulo Gaspar" <[EMAIL PROTECTED]> wrote: > I (a guy whom still committed nothing) would like very much to have such > feature. > > For our development environment would be fine since it is convenient for > us to have Tomcat in many non programmer workstations ('cause of J

RE: Feature Request

2000-12-29 Thread Paulo Gaspar
ng in windows than Apache + Tomcat. So, I agree with Jon on this one. I guess he is not a (complete) asshole. =;o) Have fun, Paulo Gaspar > -Original Message- > From: Jon Stevens [mailto:[EMAIL PROTECTED]] > Sent: Friday, December 29, 2000 00:00 > To: [EMAIL PROTECTED] >

Re: Feature Request

2000-12-28 Thread Jon Stevens
on 12/28/2000 5:28 PM, "Glenn Nielsen" <[EMAIL PROTECTED]> wrote: > Apache mod_rewrite is very cool, it comes in handy at times. > Your feature request didn't contain much justifiying why it was needed. > I'm sure you have your reasons, go for it. I thought its "cool"ness clearly justifies it.

Re: Feature Request

2000-12-28 Thread Glenn Nielsen
Jon Stevens wrote: > > on 12/28/2000 2:25 PM, "Glenn Nielsen" <[EMAIL PROTECTED]> wrote: > > > This would be way down on my list of priorities for a Jakarta project. > > It doesn't have to be a Jakarta Project. I never suggested that. > > > If I needed mod_rewrite for testing I would install A

Re: Feature Request

2000-12-28 Thread javabettin
Is this not already an action item for catalina?? (RewriteValve) Dave --- Jon Stevens <[EMAIL PROTECTED]> wrote: > on 12/28/2000 2:25 PM, "Glenn Nielsen" > <[EMAIL PROTECTED]> wrote: > > > This would be way down on my list of priorities > for a Jakarta project. > > It doesn't have to be a Jak

Re: Feature Request

2000-12-28 Thread Jon Stevens
on 12/28/2000 2:25 PM, "Glenn Nielsen" <[EMAIL PROTECTED]> wrote: > This would be way down on my list of priorities for a Jakarta project. It doesn't have to be a Jakarta Project. I never suggested that. > If I needed mod_rewrite for testing I would install Apache on my local > development syst

Re: Feature Request

2000-12-28 Thread Glenn Nielsen
This would be way down on my list of priorities for a Jakarta project. If I needed mod_rewrite for testing I would install Apache on my local development system. Why "reinvent the wheel" just for testing. Besides, I would still want to test the stuff developed locally on Apache with mod_rewr