https://issues.apache.org/bugzilla/show_bug.cgi?id=50872

           Summary: Intermittent SSL failure - client certificate not
                    found
           Product: Tomcat 5
           Version: 5.5.28
          Platform: PC
        OS/Version: Windows 2000
            Status: NEW
          Severity: major
          Priority: P2
         Component: Unknown
        AssignedTo: dev@tomcat.apache.org
        ReportedBy: clive.nichol...@brent.gov.uk


After Tomcat has been started we can successfully initiate a SSL connection as
shown below:

Us                                   Them
Client Hello
                                     Server Hello,
                                     Certificate,
                                     Certificate Request,
                                     Server Hello done
Certificate,
Client Key Exchange,
Certificate Verify,
Change Cipher Spec,
Encrypted Handshake Method
                                     Change Cipher Spec,
                                     Encrypted Handshake Method

However at some point (usually after a couple of days) the process stops
working as shown below:

Us                                   Them
Client Hello
                                     Server Hello,
                                     Certificate,
                                     Certificate Request,
                                     Server Hello done
Certificate,
Client Key Exchange

The length in the Certificate message is zero indicating that a suitable
certificate could not be found.

Restarting Tomcat seems to resolve this issue as the SSL connections are
successful again. It works for a couple of days and then stops working,
requiring a re-start ot Tomcat.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to