https://bz.apache.org/bugzilla/show_bug.cgi?id=58244

--- Comment #1 from David Balažic <david.bala...@comtrade.com> ---
Created attachment 33041
  --> https://bz.apache.org/bugzilla/attachment.cgi?id=33041&action=edit
Test case to reproduce issue

The issue persists with the new apache-tomcat-8.0.26-windows-x64.

I attach a WAR file that can be used to reproduce the issue. Either unpack the
single JSP file in it and put it into the webapps folder under its own folder
(like tomcat/webapps/x/a.jsp) or deploy the WAR file under webapps/.

The WAR file also contains the CA's, server and client certificates that can be
used for the test.

Steps:
 - download and extract apache-tomcat-8.0.26-windows-x64.zip
 - (make sure you have a Java environment, JAVA_HOME must be set)
 - in conf/server.xml add:

<Connector port="8443" protocol="org.apache.coyote.http11.Http11AprProtocol"
secure="true" scheme="https"
maxThreads="150" URIEncoding="UTF-8" SSLVerifyClient="optional"
SSLPassword="testing" SSLEnabled="true"
SSLCertificateKeyFile="C:\snakeoil-rsa.key"
SSLCertificateFile="C:\snakeoil-rsa.crt"
SSLCACertificateFile="C:\CAs.crt" />

The certificate files are in the WAR file, extract them to C:\ (or elsewhere).

 - put the a.war file to the webapps folder
 - start tomcat by startup.bat
 - import the my3.p12 certificate to Firefox (the password is : test )
 - in Firefox load the page https://localhost:8443/a/a.jsp (when asked, select
the certifcate imported from my3.p12)
 - refresh the page (F5) every few seconds

Actual result: about 30 seconds after the first load of page, the page will
show a NPE instead of the certificate name

Expected: no NPE

Note: the issue usually happens in 30 seconds, but sometimes it goes on without
error for longer. If so, stop and restart tomcat and try again.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to