https://issues.apache.org/bugzilla/show_bug.cgi?id=52544

Mladen Turk <mt...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WORKSFORME

--- Comment #2 from Mladen Turk <mt...@apache.org> 2012-02-29 10:31:06 UTC ---
You will need to covert the certificate to pem.
I exported active-1.crt certificates you have send me and then did:
openssl base64 -d -A -in *.net.crt -out active-1.der
After that its loaded.

Note that depending on OpenSSL version you can get core with that certificate.
Contemporary OpenSSL's will throw

 ... (error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag)
    at org.apache.tomcat.jni.SSLContext.setCertificate(Native Method)

Also versions before 1.1.23 can core if you set key without certificate
eg you only have SSLCertificateKeyFile=".." but not SSLCertificateFile="..."

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to