Re: SSL on Tomcat5

2011-05-11 Thread Goo Sam Kong
Hi, If you use APR, the private key & certificate should be in PEM format as documented in http://tomcat.apache.org/tomcat-5.5-doc/apr.html#HTTPS *SSLCertificateFile* Name of the file that contains the server certificate. The format is PEM-encoded. SSLCertificateKeyFile Name of the file that c

Re: Error Tomcat CLIENT-CERT autentication.

2011-01-17 Thread Goo Sam Kong
Hi Angel, I encountered the same problem as you with Tomcat 5.5.27, so I upgraded to latest Tomcat to get rid of the certification error. https://issues.apache.org/bugzilla/show_bug.cgi?id=37869 is bug report on certification error. Thank you. On 17 January 2011 22:14, amcereijo cereijo wrote

Re: Tomcat7 APR Connectors Config: Unable to load certificate key conf/key1cert.pem

2010-11-24 Thread Goo Sam Kong
Hi Scott, The exception was caused by wrong setting in your original HTTPS connector settings... In Mark's email, you need to put conf/key1cert.pem in SSLCertificateFile attribute and conf/key1.pem in SSLCertificateKeyFile attribute. 2010/11/24 Scott Li > thanks Mark Thomas and Goo

Re: Tomcat7 APR Connectors Config: Unable to load certificate key conf/key1cert.pem

2010-11-24 Thread Goo Sam Kong
Hi Scott, My working HTTPS connector using APR settings as below: Try to remove SSLEngine attribute and add protocol attribute, then re-start Tomcat. 2010/11/24 Scott Li > Hi All, >I followed the instruction below > > http://tomcat.apache.org/tomcat-7.0-doc/config/http.html#SSL_Supp

Re: Client not able with perform client-cert authentication with Tomcat 6.0.29 on APR

2010-11-16 Thread Goo Sam Kong
ing SSL_library_init() which only adds the more commonly uses SSL algorithms. I am not sure where should I include this. Can you advice how to solve my problem? My APR connector settings: On 13 November 2010 00:38, Mark Thomas wrote: > On 12/11/2010 16:27, Goo Sam Kong wrote: > > Hi > >

Client not able with perform client-cert authentication with Tomcat 6.0.29 on APR

2010-11-12 Thread Goo Sam Kong
Hi I am running Tomcat 6.0.29 with JDK 1.6.0_22 on Windows XP. I changed server.xml as below.

Re: Tomcat crashed after servicing too many HTTPS connection

2010-07-08 Thread Goo Sam Kong
: > > From: Goo Sam Kong [mailto:skgo...@gmail.com] > > Subject: Re: Tomcat crashed after servicing too many HTTPS connection > > > > I did the same test on Tomcat 5.5.16 with JDK 1.5.0 > > update 7 on Windows XP > > Why are you mucking around with versions of T

Re: Tomcat crashed after servicing too many HTTPS connection

2010-07-06 Thread Goo Sam Kong
Hi Pid, Around 50 times, I press the refresh button on browser manually. I do not want to see Tomcat crash. I did the same test on Tomcat 5.5.16 with JDK 1.5.0 update 7 on Windows XP, Tomcat is running fine without any issue. On 6 July 2010 17:11, Pid wrote: > On 06/07/2010 09:48, Goo

Tomcat crashed after servicing too many HTTPS connection

2010-07-06 Thread Goo Sam Kong
I am using Tomcat 5.5.15 with JDK 1.5.0 update 7 on RedHat Enterprise. I tested my web application by refreshing a page many times, the Tomcat server crashed and thrown exception below: Jul 6, 2010 11:21:38 AM org.apache.tomcat.util.net.PoolTcpEndpoint acceptSocket SEVERE: Endpoint [SSL: ServerSo

Re: Convert a certificate from IIS (.PFX) into a (.keystore) for Apache Tomcat v 6.x

2010-06-23 Thread Goo Sam Kong
Hi Ian, Take a look on this http://tp.its.yale.edu/pipermail/cas/2005-July/001337.html. Hope it helps. On 24 June 2010 06:41, Konstantin Kolinko wrote: > 2010/6/24 Mark Eggers : > > Google is your friend? > > > > > http://www.cb1inc.com/2007/04/30/converting-pfx-certificates-to-java-keystores/

Re: Logging Requirement in Tomcat 5.5.16

2010-04-21 Thread Goo Sam Kong
Thanks Andre, I saw there is a script doing zip in /etc. I am new to Linux, :-). On 21 April 2010 17:45, André Warnier wrote: > Goo Sam Kong wrote: > >> Hi Pid, >> >> My answer below. >> >> I saw the same file names in another server (not implement log4j y

Re: Logging Requirement in Tomcat 5.5.16

2010-04-21 Thread Goo Sam Kong
On 21/04/2010 09:49, Pid wrote: > > On 21/04/2010 09:35, Goo Sam Kong wrote: > >> Oops, type too fast. I want catalina.out to be rotate daily but Tomcat > >> give me extra files (catalina.out.1.gz, catalina.out.2.gz...catalina. > >> out.30.gz). I don't want thos

Re: Logging Requirement in Tomcat 5.5.16

2010-04-21 Thread Goo Sam Kong
file rotation anywhere. On 21 April 2010 16:32, Goo Sam Kong wrote: > I want catalina.out to be rotate daily but Tomcat give me extra files > (catalina.out.1.gz, catalina.out.2.gz...catalina.out.30.gz). I don't those > extra files. Any chance to disable that? > > > On 21

Re: Logging Requirement in Tomcat 5.5.16

2010-04-21 Thread Goo Sam Kong
I want catalina.out to be rotate daily but Tomcat give me extra files (catalina.out.1.gz, catalina.out.2.gz...catalina.out.30.gz). I don't those extra files. Any chance to disable that? On 21 April 2010 16:26, Pid wrote: > On 21/04/2010 09:07, Goo Sam Kong wrote: > > Hi, >

Logging Requirement in Tomcat 5.5.16

2010-04-21 Thread Goo Sam Kong
Hi, I am using Log4j logging in Tomcat 5.5.16 with JDK 1.5.0 update 7 on RedHat Linux server. I followed the instructions on http://tomcat.apache.org/tomcat-5.5-doc/logging.html to copy the commons-logging-1.0.4.jar and log4j.jar into $CATALINA_HOME/common/lib directory. and created log4j.proper

Re: Having difficulty using keytool -genkey to get a key with blank OU (instead of unknown)

2010-04-08 Thread Goo Sam Kong
Hi Eric, Try to put the subject DN (with OU equal to blank) in -dname field as below. keytool -genkey -keystore -storepass -alias -dname "CN=your cn,OU=,O=your company,C=SG" On 9 April 2010 06:51, Eric DuToit wrote: > I need to generate a keypair with the OU having a NULL value / blank > (in

Re: smartcards for tomcat webapps

2010-04-07 Thread Goo Sam Kong
lf-signed "top of chain") into the > truststorefile?   via keytool? > > also > > does your web app's web.xml have the following? >   >    CLIENT-CERT >   > and > > ... >     >    CONFIDENTIAL >     > > > > > > __

Re: smartcards for tomcat webapps

2010-04-06 Thread Goo Sam Kong
On 6 April 2010 20:39, wrote: > Anyone using smartcards for auth? > > If so, have specific example code excerpt and server.xml? Minimum configuration changes required for HTTPS connector in server.xml is to add attributes below and amend value of clientAuth attribute from false to true or want.

Re: can't seem to migrate this app over to a new server

2010-03-24 Thread Goo Sam Kong
Hi John, You need to enable HTTPS connector, refer to SSL Support section in http://tomcat.apache.org/tomcat-5.5-doc/config/http.html to enable SSL in server.xml. On 24 March 2010 14:22, joon yoo wrote: > We're in the process of extricating ourselves from a host who developed and > managed our a

Re: Force Tomcat 5.5.16 to close SSL session upon every request

2010-03-23 Thread Goo Sam Kong
Thank you, Mark On 23 March 2010 16:31, Mark Thomas wrote: > On 23/03/2010 06:58, Goo Sam Kong wrote: >> Hi Ben, >> >> Do you know why Tomcat take some time to close the connection? Is it >> predictable? > > Tomcat does close the connection. > >> My Java

Re: Force Tomcat 5.5.16 to close SSL session upon every request

2010-03-22 Thread Goo Sam Kong
Hi Ben, Do you know why Tomcat take some time to close the connection? Is it predictable? My Java client is authenticate with Tomcat server using USB based security token through client certificate authentication. Even though I removed the token, Java client still able to run until some times, th

Force Tomcat 5.5.16 to close SSL session upon every request

2010-03-22 Thread Goo Sam Kong
Hi Is it possible Tomcat close SSL session upon every HTTP request? I am running Tomcat 5.5.16 on JDK 1.5.0 update 7 on RedHat Enterprise. Thank you. Regards, SamKong Goo - To unsubscribe, e-mail: users-unsubscr...@tomcat.apac

Re: How to set SSL session timeout in Tomcat 5.5.16

2010-03-17 Thread Goo Sam Kong
Hi Mark, Will apache.org correct the Tomcat documentation or fix the code? Thank you. On 18 March 2010 11:16, Caldarale, Charles R wrote: >> From: Goo Sam Kong [mailto:skgo...@gmail.com] >> Subject: Re: How to set SSL session timeout in Tomcat 5.5.16 >> >> OIC, so whe

Re: How to set SSL session timeout in Tomcat 5.5.16

2010-03-17 Thread Goo Sam Kong
Hi Chuck, OIC, so when the code will be fixed? On 18 March 2010 11:07, Caldarale, Charles R wrote: >> From: Goo Sam Kong [mailto:skgo...@gmail.com] >> Subject: Re: How to set SSL session timeout in Tomcat 5.5.16 >> >> I noticed there is a error in Tomca

Re: How to set SSL session timeout in Tomcat 5.5.16

2010-03-17 Thread Goo Sam Kong
meout" in HTTPS connector. Thank you. On 17 March 2010 17:32, Goo Sam Kong wrote: > Thank you very much Mark, I will try it tomorrow. > > On 17 March 2010 16:40, Mark Thomas wrote: >> On 17/03/2010 00:49, Goo Sam Kong wrote: >>> May I know how to set the SSL session timeout

Re: How to set SSL session timeout in Tomcat 5.5.16

2010-03-17 Thread Goo Sam Kong
Thank you very much Mark, I will try it tomorrow. On 17 March 2010 16:40, Mark Thomas wrote: > On 17/03/2010 00:49, Goo Sam Kong wrote: >> May I know how to set the SSL session timeout in Tomcat 5.5.16. I am >> running JDK 1.5.0 update 7 on RedHat Enterprise. > > 1. Upgrad

Re: How to set SSL session timeout in Tomcat 5.5.16

2010-03-16 Thread Goo Sam Kong
e, Charles R wrote: >> From: Goo Sam Kong [mailto:skgo...@gmail.com] >> Subject: Re: How to set SSL session timeout in Tomcat 5.5.16 >> >> I attempted that, that is HTTP Session not SSL session. > > Depending on how your webapp is configured, you may have two HttpSes

Re: How to set SSL session timeout in Tomcat 5.5.16

2010-03-16 Thread Goo Sam Kong
know how to do/configure to invalidate SSL session? Thank you. Regards, SamKong Goo On 17 March 2010 10:30, Caldarale, Charles R wrote: >> From: Goo Sam Kong [mailto:skgo...@gmail.com] >> Subject: Re: How to set SSL session timeout in Tomcat 5.5.16 >> >> Can I invalidate t

Re: How to set SSL session timeout in Tomcat 5.5.16

2010-03-16 Thread Goo Sam Kong
ale, Charles R wrote: >> From: Goo Sam Kong [mailto:skgo...@gmail.com] >> Subject: How to set SSL session timeout in Tomcat 5.5.16 >> >> May I know how to set the SSL session timeout in Tomcat 5.5.16. > > The session timeout value is independent of the session security

How to set SSL session timeout in Tomcat 5.5.16

2010-03-16 Thread Goo Sam Kong
May I know how to set the SSL session timeout in Tomcat 5.5.16. I am running JDK 1.5.0 update 7 on RedHat Enterprise. Thank you. Regards, SamKong Goo - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional c