Re: SSL certificate makes site dont work

2020-09-22 Thread Christopher Schultz
Carles, On 9/22/20 08:57, Carles Franquesa wrote: > Trying to install an SSL certificate on 8.5.57. > > Once created the cert files, and with a jks available, and set in a > connector into server.xml file, cannot connect to the page. > > The connectors code is > > ''' > > protocol="org.ap

Re: SSL Certificate Renewal

2019-06-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Nitin, On 6/18/19 13:50, Nitin Kadam wrote: > Hello, > > I want to renew current SSL certificate So I am confused. Do I need > to recreate keystore and csr for new certificate. > > If I have to create new keystore, how I can create same on existin

Re: SSL Certificate Renewal

2019-06-18 Thread Nitin Kadam
Hello, I want to renew current SSL certificate So I am confused. Do I need to recreate keystore and csr for new certificate. If I have to create new keystore, how I can create same on existing running setup. On Thu, Jun 13, 2019, 12:11 PM Ognjen Blagojevic < ognjen.d.blagoje...@gmail.com> wrote

Re: SSL Certificate Renewal

2019-06-12 Thread Ognjen Blagojevic
Nitin On 13.6.2019. 07.37, Nitin Kadam wrote: I have apache tomcat server running with publicly signed SSL certificate configured in server.xml, the same certificate is expiring in next week, I need steps to the to renew of same. *Server OS: Windows 2012 R2* *Apache Tomcat/8.5.38* 1. How to gen

Re: SSL certificate error in Tomcat 9

2019-06-12 Thread Mark Thomas
On 12/06/2019 15:45, Support wrote: > Hi Sir, > I am using tomcat 9 for my application. > > I got an error with the .keystore file for SSL certificate > > this is my code is this still valid? in tomcat 9 > > maxThreads="150" SSLEnabled="true" scheme="https" secure="true" > clientAuth="f

Re: SSL Certificate Help

2012-11-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Brian, On 11/8/12 4:39 AM, Brian Burch wrote: > On 07/11/12 21:13, Alissa Schneider wrote: >> * I recreated the keystore. > > Which will have generate a NEW public/private key pair. +1 >> * I imported the CA-signed certificate. > >

Re: SSL Certificate Help

2012-11-08 Thread Ognjen Blagojevic
Alissa, On 7.11.2012 22:13, Alissa Schneider wrote: Here are the steps I have taken thus far: * I deleted my original keystore that held my self-signed certificate. * I deleted the self-signed certificate. * I recreated the keystore. * I imported the CA-signed

Re: SSL Certificate Help

2012-11-08 Thread Brian Burch
On 07/11/12 21:13, Alissa Schneider wrote: Hi - I'm a novice Tomcat user. I've only used the tool to support BusinessObjects. I recently was asked to set up SSL for the first time. Initially I created my own self-signed certificate and was able to get everything working fine, although I would

RE: SSL Certificate Help

2012-11-07 Thread Alissa Schneider
--Original Message- From: Igor Cicimov [mailto:icici...@gmail.com] Sent: Wednesday, November 07, 2012 4:37 PM To: Tomcat Users List Subject: Re: SSL Certificate Help Sounds like your browser is still caching your old one. If Firefox then go to Tools->Options->Advanced->View Certificates butt

Re: SSL Certificate Help

2012-11-07 Thread Igor Cicimov
On Thu, Nov 8, 2012 at 8:32 AM, Alissa Schneider wrote: > Yes, I have...many, many times. But good question! > > -Original Message- > From: James Lampert [mailto:jam...@touchtonecorp.com] > Sent: Wednesday, November 07, 2012 3:28 PM > To: Tomcat Users List > Subject

RE: SSL Certificate Help

2012-11-07 Thread Alissa Schneider
Yes, I have...many, many times. But good question! -Original Message- From: James Lampert [mailto:jam...@touchtonecorp.com] Sent: Wednesday, November 07, 2012 3:28 PM To: Tomcat Users List Subject: Re: SSL Certificate Help Alissa Schneider wrote: > Still, when I visit https://localh

Re: SSL Certificate Help

2012-11-07 Thread James Lampert
Alissa Schneider wrote: Still, when I visit https://localhost:8443, the browser throws a certificate warning. When I click on the certificate warning and view certificate, it displays information on my self-signed certificate (that I've deleted). I think if I could figure out how to make Tomcat

RE: SSL Certificate Update Not Reflected on the Website

2012-01-09 Thread Conway Liu
List Subject: Re: SSL Certificate Update Not Reflected on the Website On 09/01/2012 10:44, Conway Liu wrote: > Hi Pid, > > I tried different browsers, and tried different computers. > > What command line tool are you talking about? Something like: curl or openssl p &g

Re: SSL Certificate Update Not Reflected on the Website

2012-01-09 Thread Pid
Pid * [mailto:p...@pidster.com] > Sent: Monday, 9 January 2012 11:37 p.m. > To: Tomcat Users List > Subject: Re: SSL Certificate Update Not Reflected on the Website > > On 9 Jan 2012, at 10:20, Conway Liu wrote: > >> Hi, >> >> We used to use Thawte for our SSL certifi

Re: SSL Certificate Update Not Reflected on the Website

2012-01-09 Thread Ognjen Blagojevic
Conway, On 9.1.2012 11:19, Conway Liu wrote: Does anyone have any suggestion where might be wrong? Do you have anything between your browser and Tomcat? Apache HTTPd, perhaps, or some kind of load balancer with SSL termination? -Ognjen --

RE: SSL Certificate Update Not Reflected on the Website

2012-01-09 Thread Conway Liu
Hi Pid, I tried different browsers, and tried different computers. What command line tool are you talking about? Thanks Conway -Original Message- From: Pid * [mailto:p...@pidster.com] Sent: Monday, 9 January 2012 11:37 p.m. To: Tomcat Users List Subject: Re: SSL Certificate Update Not

Re: SSL Certificate Update Not Reflected on the Website

2012-01-09 Thread Pid *
On 9 Jan 2012, at 10:20, Conway Liu wrote: > Hi, > > We used to use Thawte for our SSL certificate. Today I installed new SSL > certificate issued by VeriSign and there were no errors. The primary and > secondary intermediate CAs both imported into the keystore file properly, > and then the SSL i

RE: SSL Certificate formats, requirements for import into existing keystore

2011-07-07 Thread Peterson, Tommy
: Thursday, July 07, 2011 1:46 AM To: Tomcat Users List; users@tomcat.apache.org Subject: Re: SSL Certificate formats, requirements for import into existing keystore "Peterson, Tommy" schrieb: I have a keystore for an application that runs on Tomcat. People here introduced a load balancer

Re: SSL Certificate formats, requirements for import into existing keystore

2011-07-06 Thread Felix Schumacher
"Peterson, Tommy" schrieb: I have a keystore for an application that runs on Tomcat. People here introduced a load balancer (LB) into the mix for this same application and therefore I have to use keytool to import the LB's certificate into the existing keystore. However, the key and the cer

Re: SSL Certificate formats, requirements for import into existing keystore

2011-07-06 Thread Felix Schumacher
Hi Marvin, Marvin Addison schrieb: >> There is some "junk" ("bag attributes")n the file that I don't' >understand. I am used to just seeing "-BEGIN CERTIFICATE- >"END CERTIFICATE- "" ""-BEGIN RSA PRIVATE KEY- >"-END RSA PRIVATE KEY- " > >As far as I know, keytool

Re: SSL Certificate formats, requirements for import into existing keystore

2011-07-06 Thread Marvin Addison
> There is some "junk" ("bag attributes")n the file that I don't' understand. I > am used to just seeing "-BEGIN CERTIFICATE- "END CERTIFICATE- > "" ""-BEGIN RSA PRIVATE KEY- "-END RSA PRIVATE KEY- " As far as I know, keytool can only import certificates in PKCS8

RE: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-26 Thread Brett Delle Grazie
Hi Richard, Comments below, Regards, Brett From: Richard da Silva [mailto:roman_s...@yahoo.com] Sent: 26 October 2010 13:30 To: Tomcat Users List; Brett Delle Grazie; crypto@gmail.com Cc: darryl.le...@unsw.edu.au Subject: RE: SSL Certificate : Unable to configure Tomcat

RE: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-26 Thread Richard da Silva
from. And, to make matters worse, there is no "error message" to tell me what I am doing wrong. Richard da Silva --- On Tue, 10/26/10, Brett Delle Grazie wrote: From: Brett Delle Grazie Subject: RE: SSL Certificate : Unable to configure Tomcat "server.xml" To: "

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-26 Thread Crypto Sal
On 10/26/2010 04:08 AM, Richard da Silva wrote: Thanks for your response, Darryl But, the certificate is not the problem. The Tomcat Configuration is the issue (server.xml) Richard da Silva Richard, Are you sure that the certificate isn't also the problem? As Brett has previously menti

RE: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-26 Thread Brett Delle Grazie
:roman_s...@yahoo.com] Sent: Tuesday, 26 October 2010 5:25 PM To: brett.dellegra...@intact-is.com Cc: users@tomcat.apache.org Subject: Re: SSL Certificate : Unable to configure Tomcat "server.xml" (a) Exists in certificate store 'cacerts' (bad idea btw). Yes it does exist. Bu

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-26 Thread Rainer Frey
On Tuesday 26 October 2010 08:24:53 Richard da Silva wrote: > (a) Exists in certificate store 'cacerts' (bad idea btw). > > Yes it does exist. > > But, I took your advice, and created a separate keystore. Then imported the > certificate there Did you create a new private key and request a new ce

RE: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-26 Thread Darryl Lewis
erts -file ssl.crt -keystore /path/to/keystore -Original Message- From: Richard da Silva [mailto:roman_s...@yahoo.com] Sent: Tuesday, 26 October 2010 5:25 PM To: brett.dellegra...@intact-is.com Cc: users@tomcat.apache.org Subject: Re: SSL Certificate : Unable to configure Tomcat "

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-25 Thread Richard da Silva
m does not lie with the SSL >certificate itself. It's with the Tomcat configuration (and that damn >server.xml file).  Richard da Silva --- On Mon, 10/25/10, Brett Delle Grazie wrote: From: Brett Delle Grazie Subject: Re: SSL Certificate : Unable to configure Tomcat "server

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-25 Thread Brett Delle Grazie
Hi, I haven't read the rest of the thread (forgive me for that) so please ignore if I'm repeating someone else's advice. Can you manually confirm (via command line tool 'keytool') that the certificate: (a) Exists in certificate store 'cacerts' (bad idea btw). (b) Exists with the exact label 'tom

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-22 Thread Pid
On 22/10/2010 19:02, Caldarale, Charles R wrote: > From: Stefano Suzzi [mailto:s.su...@protesa.it] > Subject: Re: SSL Certificate : Unable to configure Tomcat "server.xml" > > i think you miss the protocol and scheme attribute. > > The OP clearly had the scheme

RE: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-22 Thread Caldarale, Charles R
From: Stefano Suzzi [mailto:s.su...@protesa.it] Subject: Re: SSL Certificate : Unable to configure Tomcat "server.xml" i think you miss the protocol and scheme attribute. The OP clearly had the scheme specified, and the protocol defaults to "HTTP/1.1". Start aga

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-22 Thread Stefano Suzzi
; > Richard da Silva > > --- On Fri, 10/22/10, Pid * wrote: > > From: Pid * > Subject: Re: SSL Certificate : Unable to configure Tomcat "server.xml" > To: "Tomcat Users List" > Date: Friday, October 22, 2010, 4:04 PM > > On 22 Oct 2010,

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-22 Thread Pid
On 22/10/2010 14:04, Pid * wrote: > On 22 Oct 2010, at 13:54, Richard da Silva wrote: > >> Hi all, >> >> I've been fighting with a very silly problem all day. >> >> I have an instance of Sun Identity Manager (IDM) running on a Tomcat server. >> >> To be able to use some of its Resources features,

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-22 Thread Richard da Silva
e found nothing remotely addressing my problem. Richard da Silva --- On Fri, 10/22/10, Pid * wrote: From: Pid * Subject: Re: SSL Certificate : Unable to configure Tomcat "server.xml" To: "Tomcat Users List" Date: Friday, October 22, 2010, 4:04 PM On 22 Oct 2010, at 13:54,

Re: SSL Certificate : Unable to configure Tomcat "server.xml"

2010-10-22 Thread Pid *
On 22 Oct 2010, at 13:54, Richard da Silva wrote: > Hi all, > > I've been fighting with a very silly problem all day. > > I have an instance of Sun Identity Manager (IDM) running on a Tomcat server. > > To be able to use some of its Resources features, we have had to create and > install SSL Cer

Re: ssl certificate

2008-08-15 Thread Mark Thomas
Alonzo Wilson wrote: > Thank you. I look forward to having a tomcat restart command. The > stop and restart is considered downtime and requires documentation. > I'm hoping it will come in a future release. Sorry, that is very unlikely to ever happen. You can restart a context without dropping c

Re: ssl certificate

2008-08-15 Thread Alonzo Wilson
Thank you. I look forward to having a tomcat restart command. The stop and restart is considered downtime and requires documentation. I'm hoping it will come in a future release. >>> Mark Thomas <[EMAIL PROTECTED]> 8/14/2008 11:17 AM >>> Alonzo Wilson wrote: > Please explain. How does adding a

Re: ssl certificate

2008-08-14 Thread Mark Thomas
Alonzo Wilson wrote: > Please explain. How does adding a new connector restart tomcat and > activate the new ssl cert? It doesn't. In 4.1.30 you can use the admin app to add a connector and start it. In 6.0.16 the admin app doesn't exist so JMX is your only option but this could be tricky so re

Re: ssl certificate

2008-08-14 Thread Alonzo Wilson
Please explain. How does adding a new connector restart tomcat and activate the new ssl cert? >>> Mark Thomas <[EMAIL PROTECTED]> 8/12/2008 5:05 PM >>> Alonzo Wilson wrote: > 4.1.30 and 6.0.16 4.1.30 you should be able to use the admin app to add a new connector. With 6.0.16 you might be able t

Re: ssl certificate

2008-08-12 Thread Mark Thomas
Alonzo Wilson wrote: 4.1.30 and 6.0.16 4.1.30 you should be able to use the admin app to add a new connector. With 6.0.16 you might be able to use JMX. Restarting Tomcat will be far easier. Mark - To start a new topic, e-

Re: ssl certificate

2008-08-12 Thread Alonzo Wilson
4.1.30 and 6.0.16 >>> Mark Thomas <[EMAIL PROTECTED]> 8/12/2008 3:02 PM >>> Alonzo Wilson wrote: > After importing the signed certificate using > > > keytool -import -alias tomcat1 -trustcacerts -file tsat.cer > -keystore .keystore > > is there a way to make the new certificate active besid

Re: ssl certificate

2008-08-12 Thread Mark Thomas
Alonzo Wilson wrote: After importing the signed certificate using keytool -import -alias tomcat1 -trustcacerts -file tsat.cer -keystore .keystore is there a way to make the new certificate active besides stopping and starting tomcat? Tomcat version? Mark --

RE: SSL certificate

2007-03-30 Thread Mirou, Antoine
keyAlias ? > -Message d'origine- > De : Reis, Tom [mailto:[EMAIL PROTECTED] > Envoyé : vendredi 30 mars 2007 19:01 > À : users@tomcat.apache.org > Objet : SSL certificate > > If you have multiple signed certificates (Verisign) in your keystore > how does Tomcat know which one to use?

Re: SSL Certificate

2007-01-11 Thread Luis Rivera
I am not sure of this. But I believe you can install your self signed certificate on your browser, that way it will trust it next time. --Luis R. On 1/11/07, Jim Reynolds <[EMAIL PROTECTED]> wrote: I have configured SSL a while back and created a temporary certificate following the docum

RE: SSL Certificate Beginner Question

2005-12-01 Thread Caldarale, Charles R
> From: Paul Singleton [mailto:[EMAIL PROTECTED] > Subject: Re: SSL Certificate Beginner Question > > David Wall wrote: > > > > ...if the user accesses your site with http://, > > the port 80 Connector (or 8080 if testing or using a > > non-standard por

Re: SSL Certificate Beginner Question

2005-12-01 Thread Paul Singleton
David Wall wrote: ...if the user accesses your site with http://, the port 80 Connector (or 8080 if testing or using a non-standard port) has a "redirectPort" element that causes Tomcat to automatically issue a redirect using https:// Are you sure? I thought redirectPort was only u

Re: SSL Certificate Beginner Question

2005-11-30 Thread David Wall
I did not include a security constraint. Is this needed for SSL? I spend some time looking at this element, and I was under the impression that it was for form authentication? You don't really need it for SSL testing, but you'd want to do it in your production world because it basically ins

RE: SSL Certificate Beginner Question

2005-11-30 Thread Scott Purcell
:16 AM To: Tomcat Users List Subject: Re: SSL Certificate Beginner Question Did you include a security contraint element in your web.xml file? Something like this: HTTPS for all of these pages of the application. /secure/* CONFIDENTIAL [EMAIL

Re: SSL Certificate Beginner Question

2005-11-30 Thread frankburns
may help someone feed me back some relevant information. > Scott > > - Original Message - > From: "Hassan Schroeder" <[EMAIL PROTECTED]> > To: "Tomcat Users List" > Sent: Tuesday, November 29, 2005 9:37 PM > Subject: Re: SSL Certificate Beginner

Re: SSL Certificate Beginner Question

2005-11-30 Thread Chris Lear
* Bill Barker wrote (30/11/05 05:42): > "Scott Purcell" <[EMAIL PROTECTED]> wrote in message > news:[EMAIL PROTECTED] >> Real helpful ... I searched on SRV.12 and it brought up a bunch of links >> that have nothing to do with Tomcat config of SSL. >> >> I probably posted a lame request. Let me tr

Re: SSL Certificate Beginner Question

2005-11-29 Thread Bill Barker
states it is coming from a certain URL. So I am not sure how > that all works. > > > I hope this may help someone feed me back some relevant information. > > Scott > > > - Original Message - > From: "Hassan Schroeder" <[EMAIL PROTECTED]> > To: &

Re: SSL Certificate Beginner Question

2005-11-29 Thread Scott Purcell
> To: "Tomcat Users List" Sent: Tuesday, November 29, 2005 10:43 PM Subject: Re: SSL Certificate Beginner Question > Scott Purcell wrote: > > Real helpful ... I searched on SRV.12 and it brought up a bunch of links > > that have nothing to do with Tomcat config of

Re: SSL Certificate Beginner Question

2005-11-29 Thread Hassan Schroeder
Scott Purcell wrote: > Real helpful ... I searched on SRV.12 and it brought up a bunch of links > that have nothing to do with Tomcat config of SSL. OK, here's a direct link to the Servlet Spec: :: which, BTW, is the first Google hi

Re: SSL Certificate Beginner Question

2005-11-29 Thread Scott Purcell
name, so maybe the simple localhost will not work and only the dns entry will work. ... Thanks much for your time. Scott - Original Message - From: "David Wall" <[EMAIL PROTECTED]> To: "Tomcat Users List" Sent: Tuesday, November 29, 2005 10:2

Re: SSL Certificate Beginner Question

2005-11-29 Thread David Wall
<-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 --> You probably want to add the following attributes to the Connector above: keystoreFile="keys/tomcatkeys" keystorePass="123" Obviously, make the keystoreFile point to the name of the Java keystore that you put your certificat

Re: SSL Certificate Beginner Question

2005-11-29 Thread Scott Purcell
Scott - Original Message - From: "Hassan Schroeder" <[EMAIL PROTECTED]> To: "Tomcat Users List" Sent: Tuesday, November 29, 2005 9:37 PM Subject: Re: SSL Certificate Beginner Question > Scott Purcell wrote: > > > How do I configure some of my pages to use htt

Re: SSL Certificate Beginner Question

2005-11-29 Thread Hassan Schroeder
Scott Purcell wrote: > How do I configure some of my pages to use https? I do not know > where to begin on this? Begin with the Servlet Spec. -- SRV.12 (Security) would be apropos :-) HTH! -- Hassan Schroeder - [EMAIL PROTECTED] Webtuitive Design === (+1) 408-938-0