Re: tomcat and FIPS - PKCS11 CKR_SESSION_READ_ONLY error after OpenJDK upgrade

2022-11-18 Thread Christopher Schultz
Joey, On 11/17/22 10:52, Joey Cochran wrote: You might still have a passphrase on the private key that is different from the passphrase on the keystore. This may be the case, but is pretty uncommon. After that, my next try would be without explicitly setting ciphers. This exception occurs w

Re: tomcat and FIPS - PKCS11 CKR_SESSION_READ_ONLY error after OpenJDK upgrade

2022-11-18 Thread Christopher Schultz
Angela, On 11/16/22 20:31, Cantor, Angela T. wrote: And one thing I forgot - yes Chris, could you please provide the code you mentioned in case that is the issue? Sure: import java.security.Provider; import java.security.Security; import java.util.*; /** * A crude class for displaying all th

Re: tomcat and FIPS - PKCS11 CKR_SESSION_READ_ONLY error after OpenJDK upgrade

2022-11-18 Thread Christopher Schultz
Angela, On 11/16/22 20:27, Cantor, Angela T. wrote: Thanks to Joey and Chris for responding. Joey had said Jump through the hoop of rebuilding the keystore with the current java I believe this is what we did that made the difference I am not familiar with PKCS11 we use Http11N

Re: Why does LockOutRealm not support CredentialHandler?

2022-11-18 Thread Christopher Schultz
Rémy, On 11/17/22 05:07, Rémy Maucherat wrote: On Wed, Nov 16, 2022 at 6:14 PM Christopher Schultz wrote: Rémy, On 11/16/22 07:53, Rémy Maucherat wrote: On Wed, Nov 16, 2022 at 1:36 PM Christopher Schultz wrote: Thorsten, On 11/16/22 03:20, Thorsten Schöning wrote: Guten Tag Christophe

Re: HTTP/2 connection broken (RST_STREAM) when multiple timeouts waiting for data from client

2022-11-18 Thread Gonzalo Fernandez
> > > > On 18/11/2022 10:21, Mark Thomas wrote: > > On 17/11/2022 20:01, Gonzalo Fernandez wrote: > > > > > > > >>> The problem happens when a client with an open TCP / HTTP2 connection > >>> sends multiple incomplete streams, which seems to block the connection > >>> forever and not be able to ac

Re: HTTP/2 connection broken (RST_STREAM) when multiple timeouts waiting for data from client

2022-11-18 Thread Mark Thomas
On 18/11/2022 10:21, Mark Thomas wrote: On 17/11/2022 20:01, Gonzalo Fernandez wrote: The problem happens when a client with an open TCP / HTTP2 connection sends multiple incomplete streams, which seems to block the connection forever and not be able to accept new streams. In detail, usin

Re: HTTP/2 connection broken (RST_STREAM) when multiple timeouts waiting for data from client

2022-11-18 Thread Mark Thomas
On 17/11/2022 20:01, Gonzalo Fernandez wrote: The problem happens when a client with an open TCP / HTTP2 connection sends multiple incomplete streams, which seems to block the connection forever and not be able to accept new streams. In detail, using tcpdump, we are seeing that the Tomcat Ser