Re: SSL Configuration Errors -- Resolved

2012-01-10 Thread Justin Larose
All, > > This seems to be the problem. How do I set my imported cert as a "key > > entry" or get Tomcat to read it as a CertEntry? > You must use the same keystore and same alias when you: > 1. generate key, > 2. generate csr, > 3. import certificate. > > Example: > keytool -genkey ... -keystore

Re: SSL Configuration Errors

2012-01-10 Thread Justin Larose
Ognjen, > You must use the same keystore and same alias when you: > 1. generate key, > 2. generate csr, > 3. import certificate. > > Example: > keytool -genkey ... -keystore xxx.jks -alias yyy > keytool -certreq ... -keystore xxx.jks -alias yyy > and later > keytool -import -trustcacerts ... -ke

Re: SSL Configuration Errors

2012-01-09 Thread Ognjen Blagojevic
Justin, On 9.1.2012 20:40, Justin Larose wrote: This seems to be the problem. How do I set my imported cert as a "key entry" or get Tomcat to read it as a CertEntry? You must use the same keystore and same alias when you: 1. generate key, 2. generate csr, 3. import certificate. Example: ke

Re: SSL Configuration Errors

2012-01-09 Thread Justin Larose
Chris, > This list strips non-text attachments. I will sent it in text format next time. > > I have used the keytool to delete all 3 certs (root, intermediate > > and primary) and readd them many times. I even just tried only the > > Primary cert with the alias tomcat as the only cert. But the l

Re: SSL Configuration Errors

2012-01-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Justin, On 1/9/12 2:24 PM, Justin Larose wrote: > I did import my cert with the alias tomcat. You can see that in > the screenshot here: This list strips non-text attachments. > I have used the keytool to delete all 3 certs (root, intermediate > and

Re: SSL Configuration Errors

2012-01-09 Thread Justin Larose
Christopher Schultz wrote on 01/06/2012 05:20:12 PM: > From: Christopher Schultz > To: Tomcat Users List > Date: 01/06/2012 05:20 PM > Subject: Re: SSL Configuration Errors > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > Justin, > On 1/6/12 2:56 PM, Ju

Re: SSL Configuration Errors

2012-01-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark, On 1/6/12 5:19 PM, Mark Thomas wrote: > On 06/01/2012 22:12, Christopher Schultz wrote: >> Pid, >> >> On 1/6/12 4:30 AM, Pid wrote: >>> On 05/01/2012 18:22, Justin Larose wrote: truststoreFile="F:\Serena\Dimensions 2009 R2\Common Too

Re: SSL Configuration Errors

2012-01-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Justin, On 1/6/12 2:56 PM, Justin Larose wrote: > This Tomcat environment was setup long before I worked here, so I > am just upgrading from an older version to 7.0.23 and trying to not > use a self signed certificate. It's important for you to know

Re: SSL Configuration Errors

2012-01-06 Thread Mark Thomas
On 06/01/2012 22:12, Christopher Schultz wrote: > Pid, > > On 1/6/12 4:30 AM, Pid wrote: >> On 05/01/2012 18:22, Justin Larose wrote: >>> truststoreFile="F:\Serena\Dimensions 2009 R2\Common >>> Tools\Tomcat 7.0\conf\wcmdev-ssl.jks" > >> truststoreType has the default, you can remove it. truststo

Re: SSL Configuration Errors

2012-01-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Pid, On 1/6/12 4:30 AM, Pid wrote: > On 05/01/2012 18:22, Justin Larose wrote: >> truststoreFile="F:\Serena\Dimensions 2009 R2\Common Tools\Tomcat >> 7.0\conf\wcmdev-ssl.jks" > > truststoreType has the default, you can remove it. No, truststoreFile

Re: SSL Configuration Errors

2012-01-06 Thread Justin Larose
Pid wrote on 01/06/2012 04:30:30 AM: > From: Pid > To: Tomcat Users List > Date: 01/06/2012 04:31 AM > Subject: Re: SSL Configuration Errors > > > > connectionTimeout="2" > > redirectPort="8443" />

Re: SSL Configuration Errors

2012-01-06 Thread Pid
On 05/01/2012 18:22, Justin Larose wrote: > Sorry. Comments removed. > > ___ No APR, nothing to see here, move along, move along... You can use an executor to provide a common thread pool for all linked connectors - to reduce the overhead of unused threads. >

Re: SSL Configuration Errors

2012-01-05 Thread Justin Larose
Configuration Errors On 04/01/2012 19:33, Justin Larose wrote: > Hello Group, > > I am seeing this error when starting Tomcat 7 on Windows. > > SEVERE: Failed to initialize end point associated with ProtocolHandler > ["http-bio-8443"] > java.io.IOException: SSL con

Re: SSL Configuration Errors

2012-01-04 Thread Pid
On 04/01/2012 19:33, Justin Larose wrote: > Hello Group, > > I am seeing this error when starting Tomcat 7 on Windows. > > SEVERE: Failed to initialize end point associated with ProtocolHandler > ["http-bio-8443"] > java.io.IOException: SSL configuration is invalid due to No available > certifi

SSL Configuration Errors

2012-01-04 Thread Justin Larose
Hello Group, I am seeing this error when starting Tomcat 7 on Windows. SEVERE: Failed to initialize end point associated with ProtocolHandler ["http-bio-8443"] java.io.IOException: SSL configuration is invalid due to No available certificate or key corresponds to the SSL cipher suites which are