We had a similar problem when our certificate was invalid. We updated our 
certificate and the problem went away. I suspect, if you are not using a valid 
certificate (from a real Certificate Authority - like VeriSign, or Thawte, 
etc.), you would need to install the certificate you used on the apache to make 
this go away (we do this in our test environment - using self-signed 
certificates). To install the certificate, you have to go through the browser's 
tools.

--
Robin D. Wilson
Director of Web Development
KingsIsle Entertainment, Inc.
WORK: 512-623-5913
CELL: 512-426-3929
www.KingsIsle.com



-----Original Message-----
From: Rainer Jung [mailto:rainer.j...@kippdata.de] 
Sent: Monday, May 04, 2009 3:32 AM
To: Tomcat Users List
Subject: Re: Tomcat over AJP with Apache in front SSL Issues

On 04.05.2009 03:27, matt617 wrote:
> when using apache 2.2, tomcat 5.5.20 on top of java 1.5.10+ using Apache with
> Mod_SSL and Mod_Proxy to connect the Incoming http session through AJP to
> Tomcat my browser repeatidly prompts me for a ceritficate. 3 times at the
> beginning, then about 3 times every 10 minutes. does anyone know why? should
> i be posting this in the apache user group? is it an apache issues or tomcat
> issue?

It depends on what component is doing the certificate check, the Apache
web server or Tomcat? I assume by "prompts me for a certificate" you
mean you are using client certificates and not simply some confirmation
that the communication should proceed although the server certificate is
insecure etc.

Are you forcing client certificates by some mod_ssl configuration (then
it's an Apache web server topic) or by some security constraint or
similar in your web app or Tomcat?

Regards,

Rainer

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to