On 22 March 2018 at 14:49, Mark Thomas <ma...@apache.org> wrote: > On 22/03/18 07:46, Richard Tearle wrote: >> On 21 March 2018 at 14:54, Mark Thomas <ma...@apache.org> wrote:
[snip] > Excellent. > > There have been a few moving parts here so I'd like to get some > clarification on exactly where we are. I know from bitter personal > experience that it is all too easy to end up using a slightly different > TLS configuration to the one you think you are using so please could you > confirm the following. > > The connector name can be obtained from the logs. You'll see lines that > look like this: > > 22-Mar-2018 14:39:30.156 INFO [main] > org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler > ["http-nio-8080"] > 22-Mar-2018 14:39:30.161 INFO [main] > org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler > ["https-jsse-nio-8443"] > 22-Mar-2018 14:39:30.163 INFO [main] > org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler > ["ajp-nio-8009"] > > The part I am using below is the bit in the square brackes. The format > is <protocol>-<tls-implementation-if-any>-<connector>-<port>. > > What we have so far is: > > 8.0.x, http-nio-nnnn (this is always JSSE in 8.0.x), clientAuth="true" > This works. Yes this works. > 8.5.x, http-nio-openssl-nnnn, certificateVerification="required" > This fails intermittently Its https-openssl-nio-nnnn and yes this fails intermittently. > 8.5.x, http-nio-jsse-nnnn, certificateVerification="required" > This works Its https-jsse-nio-nnnn, and yes this works > Is this correct? > > Thanks, > > Mark > Also working is 8.5.x, https-openssl-nio-nnnn, certificateVerification="none" Thanks -- Richard -- This email is sent on behalf of Northgate Public Services (UK) Limited and its associated companies including Rave Technologies (India) Pvt Limited (together "Northgate Public Services") and is strictly confidential and intended solely for the addressee(s). If you are not the intended recipient of this email you must: (i) not disclose, copy or distribute its contents to any other person nor use its contents in any way or you may be acting unlawfully; (ii) contact Northgate Public Services immediately on +44(0)1442 768445 quoting the name of the sender and the addressee then delete it from your system. Northgate Public Services has taken reasonable precautions to ensure that no viruses are contained in this email, but does not accept any responsibility once this email has been transmitted. You should scan attachments (if any) for viruses. Northgate Public Services (UK) Limited, registered in England and Wales under number 00968498 with a registered address of Peoplebuilding 2, Peoplebuilding Estate, Maylands Avenue, Hemel Hempstead, Hertfordshire, HP2 4NW. Rave Technologies (India) Pvt Limited, registered in India under number 117068 with a registered address of 2nd Floor, Ballard House, Adi Marzban Marg, Ballard Estate, Mumbai, Maharashtra, India, 400001. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
