RE: SSL problem

2010-07-08 Thread Caldarale, Charles R
> From: Allen Razdow [mailto:araz...@truenum.com] > Subject: RE: SSL problem > > Maybe I'll just start from scratch with the latest. Strongly recommended. > The sigalg seems to be SHA1withRSA. I gather there is > something like a cipher suite associated with JSEE... It

RE: SSL problem

2010-07-08 Thread Allen Razdow
Inc.", L=ValiCert Validation Network] SerialNumber: [01] ] *** *** [r...@ip-10-212-151-97 ~]# > -Original Message- > From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] > Sent: Thursday

RE: SSL problem

2010-07-08 Thread Caldarale, Charles R
> From: Allen Razdow [mailto:araz...@truenum.com] > Subject: SSL problem > > Using Tomcat 6.0.14 on an amazon EC2 server instance Don't suppose you'd like to try this on a version that's a bit less than three years old? Pretty pointless to debug on something that ancient. Also, what JVM are y

Re: SSL Problem with Tomcat 5.5.25 on Windows 2003 Server

2010-04-27 Thread Abdullah Teke
On Tue, Apr 27, 2010 at 8:49 PM, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Abdulla, > > On 4/27/2010 10:09 AM, Abdullah Teke wrote: >>> On Tue, Apr 27, 2010 at 5:03 PM, Pid wrote: >>> The list often strips attachments, it's better to post the contents of >>>

Re: SSL Problem with Tomcat 5.5.25 on Windows 2003 Server

2010-04-27 Thread Abdullah Teke
On Tue, Apr 27, 2010 at 8:56 PM, Caldarale, Charles R wrote: >> From: Abdullah Teke [mailto:abdullaht...@gmail.com] >> Subject: Re: SSL Problem with Tomcat 5.5.25 on Windows 2003 Server >> >> This is my server.xml. > >> > If you're using port 443 for

RE: SSL Problem with Tomcat 5.5.25 on Windows 2003 Server

2010-04-27 Thread Caldarale, Charles R
> From: Abdullah Teke [mailto:abdullaht...@gmail.com] > Subject: Re: SSL Problem with Tomcat 5.5.25 on Windows 2003 Server > > This is my server.xml. > redirectPort="8443" This should be 443, not 8443. You're either not actually using this server.xml, or somet

Re: SSL Problem with Tomcat 5.5.25 on Windows 2003 Server

2010-04-27 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Abdulla, On 4/27/2010 10:09 AM, Abdullah Teke wrote: >> On Tue, Apr 27, 2010 at 5:03 PM, Pid wrote: >> The list often strips attachments, it's better to post the contents of >> the file, inline. (Makes it easier to suggest edits, too). FWIW, it loo

Re: SSL Problem with Tomcat 5.5.25 on Windows 2003 Server

2010-04-27 Thread Abdullah Teke
On Tue, Apr 27, 2010 at 5:03 PM, Pid wrote: > On 27/04/2010 14:57, Abdullah Teke wrote: >> On Tue, Apr 27, 2010 at 4:33 PM, Caldarale, Charles R >> wrote: From: Abdullah Teke [mailto:abdullaht...@gmail.com] Subject: SSL Problem with Tomcat 5.5.25 on Windows 2003 Server When i

Re: SSL Problem with Tomcat 5.5.25 on Windows 2003 Server

2010-04-27 Thread Pid
On 27/04/2010 14:57, Abdullah Teke wrote: > On Tue, Apr 27, 2010 at 4:33 PM, Caldarale, Charles R > wrote: >>> From: Abdullah Teke [mailto:abdullaht...@gmail.com] >>> Subject: SSL Problem with Tomcat 5.5.25 on Windows 2003 Server >>> >>> When i write browser http://localhost:443 i can see the >>>

Re: SSL Problem with Tomcat 5.5.25 on Windows 2003 Server

2010-04-27 Thread Abdullah Teke
On Tue, Apr 27, 2010 at 4:33 PM, Caldarale, Charles R wrote: >> From: Abdullah Teke [mailto:abdullaht...@gmail.com] >> Subject: SSL Problem with Tomcat 5.5.25 on Windows 2003 Server >> >> When i write browser http://localhost:443 i can see the >> pages and applications. > > Which you shouldn't be

RE: SSL Problem with Tomcat 5.5.25 on Windows 2003 Server

2010-04-27 Thread Caldarale, Charles R
> From: Abdullah Teke [mailto:abdullaht...@gmail.com] > Subject: SSL Problem with Tomcat 5.5.25 on Windows 2003 Server > > When i write browser http://localhost:443 i can see the > pages and applications. Which you shouldn't be able to - this is indicative of your server.xml being broken. > Bu

Re: SSL problem

2009-12-15 Thread André Warnier
Carl wrote: Fresh Tomact 6.0.20 install on a new Slackware (version 13 - 64bit) linux box. Access to 8080 works fine but neither 8443 nor 443 work. Can you define "does not work" ? What error are you seeing ? - is it a failure to even connect to that port on the server ? - or do you get a Tom

Re: SSL problem

2009-12-15 Thread Carl
quot; Sent: Tuesday, December 15, 2009 1:28 PM Subject: Re: SSL problem On 15/12/2009 18:18, Carl wrote: keystoreFile="/usr/local/certs/tomcat_keystore.ks" keystorePass="jellybean"/> You are missing SSLEnabled="true" to tell

Re: SSL problem

2009-12-15 Thread Carl
nnelSocket init INFO: JK: ajp13 listening on /0.0.0.0:8009 Dec 15, 2009 2:43:05 PM org.apache.jk.server.JkMain start Hope this helps solve the mystery. TIA, Carl - Original Message - From: "Caldarale, Charles R" To: "Tomcat Users List" Sent: Tuesday, December 15,

Re: SSL problem

2009-12-15 Thread Mark Thomas
On 15/12/2009 18:18, Carl wrote: > maxThreads="600" minSpareThreads="25" maxSpareThreads="75" >enableLookups="false" disableUploadTimeout="true" >acceptCount="100" scheme="https" secure="true" >clientAuth="false" sslProtocol="TLS"

RE: SSL problem

2009-12-15 Thread Caldarale, Charles R
> From: Carl [mailto:c...@etrak-plus.com] > Subject: SSL problem > > Access to 8080 works fine but neither 8443 nor 443 work. What does that mean? Does Tomcat return a message saying "not working"? (I doubt it.) > I believe 443 and 8443 are up because a nmap gives: Do a netstat -an while Tom

Re: SSL problem with Tomcat 5.5

2007-11-26 Thread Dave
"Bob Grabbe" To: "'Tomcat Users List'" Sent: Monday, November 26, 2007 10:48 PM Subject: RE: SSL problem with Tomcat 5.5 > OK, I've attached a new file with the startup. Unfortunately I'm not > seeing > anything in any logs that indicate any ht

Re: SSL problem with Tomcat 5.5

2007-11-26 Thread Schadler Johann
and welcome file, replace hostname and port if neccessary, change SSL mode to ssl2 or tsl as needed Johann - Original Message - From: "Bob Grabbe" <[EMAIL PROTECTED]> To: "'Tomcat Users List'" Sent: Monday, November 26, 2007 10:48 PM Subject: R

Re: SSL problem with Tomcat 5.5

2007-11-26 Thread Martin Gainty
? If there is something in this process that is undocumented or poorly documented PLEASE let us know. HTH/ Martin- - Original Message - From: "Bob Grabbe" <[EMAIL PROTECTED]> To: "'Tomcat Users List'" Sent: Monday, November 26, 2007 4:48 PM Subject: RE

Re: SSL problem with Tomcat 5.5

2007-11-26 Thread Hassan Schroeder
On Nov 26, 2007 1:48 PM, Bob Grabbe <[EMAIL PROTECTED]> wrote: > OK, I've attached a new file with the startup. Unfortunately I'm not seeing > anything in any logs that indicate any https requests. mmm. Are you sure nothing else changed, firewall-wise? You might want to turn on the Request Dumper

RE: SSL problem with Tomcat 5.5

2007-11-26 Thread Bob Grabbe
lleys to see if they are blind." -- Marston Bates > -Original Message- > From: Hassan Schroeder [mailto:[EMAIL PROTECTED] > Sent: Monday, November 26, 2007 4:09 PM > To: Tomcat Users List > Subject: Re: SSL problem with Tomcat 5.5 > What would be best would be catalina.log at

Re: SSL problem with Tomcat 5.5

2007-11-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bob, Bob Grabbe wrote: > Bob Grabbe > Umiversity of Michigan Is that a typo or a joke? - -chris -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHSzYC9CaO5/Lv0PARAr

Re: SSL problem with Tomcat 5.5

2007-11-26 Thread Hassan Schroeder
On Nov 26, 2007 12:58 PM, Bob Grabbe <[EMAIL PROTECTED]> wrote: > Not sure which logs would help, but I've attached a notepad file with > excerpts. What would be best would be catalina.log at startup, showing whether the SSL connector started cleanly. And of course, any log entry relating specifi

RE: SSL problem with Tomcat 5.5

2007-11-26 Thread Bob Grabbe
Michigan [EMAIL PROTECTED] _ "Research is the process of going up alleys to see if they are blind." -- Marston Bates > -Original Message- > From: Hassan Schroeder [mailto:[EMAIL PROTECTED] > Sent: Monday, November 26, 2007 3:38 PM > To: Tomcat Users List > Subject: Re: S

Re: SSL problem with Tomcat 5.5

2007-11-26 Thread Hassan Schroeder
On Nov 26, 2007 10:04 AM, Bob Grabbe <[EMAIL PROTECTED]> wrote: > Our web site has had an ssl certificate from Godaddy for the last two years. > I'm trying to update the certificate because it just expired. After the > expiration, before updating I was able to get to the main page, with a > certifi

RE: SSL problem with Tomcat 5.5

2007-11-26 Thread Bob Grabbe
e- > From: Martin Gainty [mailto:[EMAIL PROTECTED] > Sent: Monday, November 26, 2007 2:02 PM > To: Tomcat Users List > Subject: Re: SSL problem with Tomcat 5.5 > > Hi Bob > There is a SSL checklist that starts with > 1)installing and configuring JSSE (now comes with JDK

Re: SSL problem with Tomcat 5.5

2007-11-26 Thread Martin Gainty
Hi Bob There is a SSL checklist that starts with 1)installing and configuring JSSE (now comes with JDK.1.4 or 1.5) 2)a)create keystore b)import the certificate into just created keystore 3)uncomment the SSL Connector entry in $CATALINA_HOME/conf/server.xml and tweak keystoreFile to point to jus

Re: SSL problem in Tomcat

2006-05-24 Thread Jfk
I know its going to sound silly... but then, i found out the problem. its the -storepass & -keypass. they have to be the same. i thought they are for different purpose... anyway, issue closed. -- View this message in context: http://www.nabble.com/SSL+problem+in+Tomcat-t1601673.html#a4554704 Se

Re: SSL problem in Tomcat

2006-05-24 Thread Jfk
Hi Gavin, I encountered the same problem as you. But i am unable to resolve it like you do. the following is my config. --Server.xml --Server.xml I have the following files in

Re: SSL problem in Tomcat

2006-05-12 Thread Gavin Alexander
Thanks for that Jack. Ironically, I just got things working again not 20 seconds before I got your email. For some reason the .keystore file had stopped working (maybe expired?) and I ended up creating a new one and adding a keystoreFile attribute with path to the new file in tomcat's server.x

Re: SSL problem in Tomcat

2006-05-12 Thread Jack
I have a page that has some config info about SSL with Client Authentication turned on. You could have a look there and see if you find any of it useful. http://jack.godau.googlepages.com/jbosscertificatesandopenssl Cheers Jack... On 11/05/06, Gavin Alexander <[EMAIL PROTECTED]> wrote: Hi, I a