Re: SSL BIO/NIO setup with openssl CA puzzle

2012-11-03 Thread Brian Burch
On 31/10/12 16:39, Daniel Mikusa wrote: On Oct 31, 2012, at 10:23 AM, Brian Burch wrote: On 26/10/12 13:24, Daniel Mikusa wrote: On Oct 26, 2012, at 5:11 AM, Brian Burch wrote: 2.8. keytool -list -v -keystore jks-keystore shows the keystore contents as two entries: 2.8.1. the first has an

Re: SSL BIO/NIO setup with openssl CA puzzle

2012-10-31 Thread Daniel Mikusa
On Oct 31, 2012, at 10:23 AM, Brian Burch wrote: > On 26/10/12 13:24, Daniel Mikusa wrote: >> On Oct 26, 2012, at 5:11 AM, Brian Burch wrote: >> >>> My production tomcat 7.0.26 (and its predecessors back as far as tc 5) have >>> been running with its original SSL server certificate in a JKS keys

Re: SSL BIO/NIO setup with openssl CA puzzle

2012-10-31 Thread Brian Burch
On 26/10/12 13:24, Daniel Mikusa wrote: On Oct 26, 2012, at 5:11 AM, Brian Burch wrote: My production tomcat 7.0.26 (and its predecessors back as far as tc 5) have been running with its original SSL server certificate in a JKS keystore for many years. I decided to retire my ancient java-base

Re: SSL BIO/NIO setup with openssl CA puzzle

2012-10-27 Thread Brian Burch
On 26/10/12 16:12, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Brian, On 10/26/12 5:11 AM, Brian Burch wrote: I have another system with java-7-openjdk-i386, but I haven't yet done any work on it. This openjdk does not ship with a keytool program, and so I presume

Re: SSL BIO/NIO setup with openssl CA puzzle

2012-10-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pid, On 10/26/12 12:15 PM, Pid wrote: > On 26/10/2012 13:53, Martin Gainty wrote: >> >> Hi Dan >> >> if you reference this simple test.jsp does every version of every >> browser accept the cert as CA cert and properly installs your >> certificate? >

Re: SSL BIO/NIO setup with openssl CA puzzle

2012-10-26 Thread Pid
On 26/10/2012 13:53, Martin Gainty wrote: > > Hi Dan > > if you reference this simple test.jsp does every version of every browser > accept the cert as CA cert and properly installs your certificate? > > <%@ page contentType="text/html"%> > > > > http://DanMachine:8080/Danwebapp/Dan

Re: SSL BIO/NIO setup with openssl CA puzzle

2012-10-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Brian, On 10/26/12 5:11 AM, Brian Burch wrote: > I have another system with java-7-openjdk-i386, but I haven't yet > done any work on it. This openjdk does not ship with a keytool > program, and so I presume it will use openssl. I dunno about the i38

RE: SSL BIO/NIO setup with openssl CA puzzle

2012-10-26 Thread Martin Gainty
ou la copie de ceci est interdite. Ce message sert à l'information seulement et n'aura pas n'importe quel effet légalement obligatoire. Étant donné que les email peuvent facilement être sujets à la manipulation, nous ne pouvons accepter aucune responsabilité pour le contenu four

Re: SSL BIO/NIO setup with openssl CA puzzle

2012-10-26 Thread Daniel Mikusa
On Oct 26, 2012, at 5:11 AM, Brian Burch wrote: > My production tomcat 7.0.26 (and its predecessors back as far as tc 5) have > been running with its original SSL server certificate in a JKS keystore for > many years. > > I decided to retire my ancient java-based Certificate Authority and creat

SSL BIO/NIO setup with openssl CA puzzle

2012-10-26 Thread Brian Burch
My production tomcat 7.0.26 (and its predecessors back as far as tc 5) have been running with its original SSL server certificate in a JKS keystore for many years. I decided to retire my ancient java-based Certificate Authority and create a new CA using openssl 1.0.1 under ubuntu linux. I fo