On 21/12/2012 13:35, Daniel Mikusa wrote: > On Dec 21, 2012, at 7:35 AM, Will Nordmeyer wrote: > >> At long last, I have tomcat configured, I have revoked certificates >> to test with… > > Nice! > >> my question today... >> >> When I try using a revoked certificate, I get the lovely and >> meaningful "page cannot be displayed." > > What browser are you using? This sounds like the generic IE > message. > >> So it is properly denying access - but it doesn't provide appear to >> provide any other feedback to the browser. > > Tomcat should be returning some HTTP error code
Nope. If the SSL session is not established (and if the client cert isn't valid there will not be an SSL session), there is no HTTP request for Tomcat to respond to. You'll get whatever (un)helpful message the browser decides to display. Mark --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
