Re: svn commit: r1199980 - in /tomcat/trunk/java/org/apache: catalina/core/AprLifecycleListener.java catalina/core/LocalStrings.properties tomcat/jni/SSL.java

[Christopher Schultz]

Mark,

On 11/10/11 6:28 AM, Mark Thomas wrote:
> On 09/11/2011 23:39, Konstantin Kolinko wrote:
>> Maybe add explicit FIPS mode status check below the above error
>> handling? Something like:
>>
>> if ("on".equalsIgnoreCase(FIPSMode) && !fipsModeActive) {
>>   fail fatally;
>> }
> 
> +1

Sounds good to me. What about checking for either FIPS *or* SSL
initialization failure? I suppose that the connector will bomb if SSL
doesn't initialize properly.

-chris

signature.asc
Description: OpenPGP digital signature