Re: tomcat6 with crl doesn't load

2012-11-28 Thread Will Nordmeyer
On Wed, Nov 28, 2012 at 1:39 PM, André Warnier wrote: > Daniel Mikusa wrote: >> >> On Nov 28, 2012, at 11:56 AM, Will Nordmeyer wrote: >> >>> On Wed, Nov 28, 2012 at 9:03 AM, Will Nordmeyer >>> wrote: On Wed, Nov 28, 2012 at 8:45 AM, Daniel Mikusa wrote: > > On Nov 28, 201

Re: tomcat6 with crl doesn't load

2012-11-28 Thread André Warnier
Daniel Mikusa wrote: On Nov 28, 2012, at 11:56 AM, Will Nordmeyer wrote: On Wed, Nov 28, 2012 at 9:03 AM, Will Nordmeyer wrote: On Wed, Nov 28, 2012 at 8:45 AM, Daniel Mikusa wrote: On Nov 28, 2012, at 8:35 AM, Will Nordmeyer wrote: On Tue, Nov 27, 2012 at 5:12 PM, Daniel Mikusa wrote:

Re: tomcat6 with crl doesn't load

2012-11-28 Thread Daniel Mikusa
On Nov 28, 2012, at 11:56 AM, Will Nordmeyer wrote: > On Wed, Nov 28, 2012 at 9:03 AM, Will Nordmeyer wrote: >> On Wed, Nov 28, 2012 at 8:45 AM, Daniel Mikusa wrote: >>> On Nov 28, 2012, at 8:35 AM, Will Nordmeyer wrote: >>> On Tue, Nov 27, 2012 at 5:12 PM, Daniel Mikusa wrote: > On N

Re: tomcat6 with crl doesn't load

2012-11-28 Thread Will Nordmeyer
On Wed, Nov 28, 2012 at 9:03 AM, Will Nordmeyer wrote: > On Wed, Nov 28, 2012 at 8:45 AM, Daniel Mikusa wrote: >> On Nov 28, 2012, at 8:35 AM, Will Nordmeyer wrote: >> >>> On Tue, Nov 27, 2012 at 5:12 PM, Daniel Mikusa wrote: On Nov 27, 2012, at 12:56 PM, Will Nordmeyer wrote: > On

Re: tomcat6 with crl doesn't load

2012-11-28 Thread Will Nordmeyer
On Wed, Nov 28, 2012 at 8:45 AM, Daniel Mikusa wrote: > On Nov 28, 2012, at 8:35 AM, Will Nordmeyer wrote: > >> On Tue, Nov 27, 2012 at 5:12 PM, Daniel Mikusa wrote: >>> On Nov 27, 2012, at 12:56 PM, Will Nordmeyer wrote: >>> On Tue, Nov 27, 2012 at 12:24 PM, Daniel Mikusa wrote: > On N

Re: tomcat6 with crl doesn't load

2012-11-28 Thread Daniel Mikusa
On Nov 28, 2012, at 8:35 AM, Will Nordmeyer wrote: > On Tue, Nov 27, 2012 at 5:12 PM, Daniel Mikusa wrote: >> On Nov 27, 2012, at 12:56 PM, Will Nordmeyer wrote: >> >>> On Tue, Nov 27, 2012 at 12:24 PM, Daniel Mikusa wrote: On Nov 27, 2012, at 9:55 AM, Will Nordmeyer wrote: > I h

Re: tomcat6 with crl doesn't load

2012-11-28 Thread Will Nordmeyer
On Tue, Nov 27, 2012 at 5:12 PM, Daniel Mikusa wrote: > On Nov 27, 2012, at 12:56 PM, Will Nordmeyer wrote: > >> On Tue, Nov 27, 2012 at 12:24 PM, Daniel Mikusa wrote: >>> On Nov 27, 2012, at 9:55 AM, Will Nordmeyer wrote: >>> I have a self signed server certificate - and the user certs have

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Daniel Mikusa
On Nov 27, 2012, at 12:56 PM, Will Nordmeyer wrote: > On Tue, Nov 27, 2012 at 12:24 PM, Daniel Mikusa wrote: >> On Nov 27, 2012, at 9:55 AM, Will Nordmeyer wrote: >> >>> I have a self signed server certificate - and the user certs have no >>> association/connection to the server cert. >> >> I a

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Mark H. Wood
On Tue, Nov 27, 2012 at 12:56:38PM -0500, Will Nordmeyer wrote: > My problem comes when I attempt to implement Certificate Revocation > List checking. The Government has a root certificate and about 20-30 > different intermediate certificate authorities that could have issued > the user certificat

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Will Nordmeyer
On Tue, Nov 27, 2012 at 12:48 PM, Konstantin Kolinko wrote: > 2012/11/27 Will Nordmeyer : >> OK, I upped it to 1024G and it still crashed. >> >> I tried loading with a 70M file (the root CA, and the CA directly >> responsible for my cert). That seemed to load, but when I tried going >> to a probe

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Will Nordmeyer
On Tue, Nov 27, 2012 at 12:24 PM, Daniel Mikusa wrote: > On Nov 27, 2012, at 9:55 AM, Will Nordmeyer wrote: > >> I have a self signed server certificate - and the user certs have no >> association/connection to the server cert. > > I apologize, but I'm not exactly sure what you are trying to confi

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Konstantin Kolinko
2012/11/27 Will Nordmeyer : > OK, I upped it to 1024G and it still crashed. > > I tried loading with a 70M file (the root CA, and the CA directly > responsible for my cert). That seemed to load, but when I tried going > to a probe application that I've got installed - to get memory data, > etc. I

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Daniel Mikusa
On Nov 27, 2012, at 9:55 AM, Will Nordmeyer wrote: > OK, I upped it to 1024G and it still crashed. > > I tried loading with a 70M file (the root CA, and the CA directly > responsible for my cert). That seemed to load, but when I tried going > to a probe application that I've got installed - to g

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Will Nordmeyer
OK, I upped it to 1024G and it still crashed. I tried loading with a 70M file (the root CA, and the CA directly responsible for my cert). That seemed to load, but when I tried going to a probe application that I've got installed - to get memory data, etc. It prompts me for my cert, but then goes

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Daniel Mikusa
On Nov 27, 2012, at 9:17 AM, Will Nordmeyer wrote: > Dan, > > I tried that - first attempt jstack threw exceptions and I got > nothing. So I killed the tomcat, took the crlFile back out and ran, > got a nice jstack showing everything running smoothly. > > Shut tomcat down, put the crlFile line

Re: tomcat6 with crl doesn't load

2012-11-27 Thread Will Nordmeyer
Dan, I tried that - first attempt jstack threw exceptions and I got nothing. So I killed the tomcat, took the crlFile back out and ran, got a nice jstack showing everything running smoothly. Shut tomcat down, put the crlFile line back and started up again. This time, tomcat6 doesn't hang, but it

Re: tomcat6 with crl doesn't load

2012-11-26 Thread Daniel Mikusa
On Nov 26, 2012, at 3:35 PM, Will Nordmeyer wrote: > have a new tomcat6.0.34 setup I'm configuring on my CentOS 6.3 (64 > bit). I've downloaded a series of CRLs for the certificate authorities > I am using, converted them from DER to PEM with openssl: > > openssl crl -inform DER -outform PEM -in