Re: Once again, clear text passwords in context.xml files

2008-05-13 Thread Kevin Williams
How about hashing the passwords with a known forumla and storing them in this intermediate format. App would need to hash the user input and compare. This might give ur security czars a warmer feeling and get them off ur back. -Kevin On 5/13/08, Milanez, Marcus <[EMAIL PROTECTED]> wrote: > Fi

Re: ssl server configuration

2008-05-09 Thread Kevin Williams
? On Fri, May 9, 2008 at 12:09 PM, Mark Thomas <[EMAIL PROTECTED]> wrote: > Kevin Williams wrote: > >> I think I may have a logging problem. All my logs are completely >> empty. I get a log4j warning to stdout and that's it. How can I fix >> the logging proble

Re: ssl server configuration

2008-05-09 Thread Kevin Williams
I think I may have a logging problem. All my logs are completely empty. I get a log4j warning to stdout and that's it. How can I fix the logging problem. This is a need problem. On 5/9/08, Mark Thomas <[EMAIL PROTECTED]> wrote: > Kevin Williams wrote: >> But when i try

Re: Fw: ssl server configuration

2008-05-08 Thread Kevin Williams
otocol="TLS"/> > Tutorial located at > http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html > Martin > > -- Original > >> Message - From: "Kevin Williams" <[EMAIL PROTECTED]> >> To: >> Sent: Thursday, May 08, 2008 5:10 PM &

ssl server configuration

2008-05-08 Thread Kevin Williams
I followed the instructions to setup the ssl server for tomcat(stand alone) on the website. I'm using v5.5 with jre 1.5 on solaris. I created my keystore, got a signed cert from my CA and inserted it into the keystore, added my CA chain certs to the keystore. I modified the server.xml file to re