Re: tomcat and ssl

2020-04-29 Thread Bill Stewart
On Tue, Apr 28, 2020 at 10:42 PM Naga Ramesh wrote: > Can you check the below link.. > > https://mkyong.com/webservices/jax-ws/suncertpathbuilderexception-unable-to-find-valid-certification-path-to-requested-target/ I think you intended to reply to the mailing list (users at tomcat dot apache dot

Re: tomcat and ssl

2020-04-28 Thread Bill Stewart
On Mon, Apr 27, 2020 at 3:31 PM calder wrote: > > On Mon, Apr 27, 2020 at 11:22 AM Beard, Shawn M. wrote: > > > I have an app running in tomcat 9 that makes an ssl call to an external > > webservice. > > > > It fails with these errors in the logs: > > > > ERROR javax.net.ssl.SSLHandshakeException:

Re: tomcat and ssl

2020-04-27 Thread calder
On Mon, Apr 27, 2020, 16:30 calder wrote: > > > On Mon, Apr 27, 2020 at 11:22 AM Beard, Shawn M. > wrote: > >> I have an app running in tomcat 9 that makes an ssl call to an external >> webservice. >> >> >> >> It fails with these errors in the logs: >> >> ERROR javax.net.ssl.SSLHandshakeExceptio

Re: tomcat and ssl

2020-04-27 Thread calder
On Mon, Apr 27, 2020 at 11:22 AM Beard, Shawn M. wrote: > I have an app running in tomcat 9 that makes an ssl call to an external > webservice. > > > > It fails with these errors in the logs: > > ERROR javax.net.ssl.SSLHandshakeException: PKIX path building failed: > sun.security.provider.certpat

RE: tomcat and ssl [EXTERNAL]

2020-04-27 Thread jonmcalexander
cooperation. -Original Message- From: Beard, Shawn M. Sent: Monday, April 27, 2020 11:47 AM To: Tomcat Users List Subject: RE: tomcat and ssl [EXTERNAL] Adding this to the JVM options worked: -Djavax.net.ssl.trustStore=/usr/apache/tomcat/ssl/TomcatTrustStore.p12

RE: tomcat and ssl [EXTERNAL]

2020-04-27 Thread Beard, Shawn M.
: users@tomcat.apache.org Subject: Re: tomcat and ssl [EXTERNAL] ** CAUTION: External message On 27/04/2020 17:29, Beard, Shawn M. wrote: > This is a 3rd party app so can't do that. We need to configure tomcat to have > apps use a trust store just like any other java container. Tha

RE: tomcat and ssl [EXTERNAL]

2020-04-27 Thread Beard, Shawn M.
Adding this to JVM options worked -Djavax.net.ssl.trustStore=/usr/apache/tomcat/ssl/TomcatTrustStore.p12 -Djavax.net.ssl.trustStorePassword=XXX Shawn Beard Sr. Systems Engineer BTS +1-515-564-2528 -Original Message- From: js84 Sent: Monday, April 27, 2020 11:33 AM To: Tomcat User

Re: tomcat and ssl [EXTERNAL]

2020-04-27 Thread Mark Thomas
as relying on system properties for configuration can be fragile). Mark > > > > Shawn Beard > Sr. Systems Engineer > BTS > +1-515-564-2528 > > -Original Message- > From: Mark Thomas > Sent: Monday, April 27, 2020 11:26 AM > To: users@

RE: tomcat and ssl [EXTERNAL]

2020-04-27 Thread Beard, Shawn M.
users@tomcat.apache.org Subject: Re: tomcat and ssl [EXTERNAL] ** CAUTION: External message On 27/04/2020 17:21, Beard, Shawn M. wrote: > I have an app running in tomcat 9 that makes an ssl call to an > external webservice. > > > > It fails with these errors

Re: tomcat and ssl

2020-04-27 Thread Mark Thomas
On 27/04/2020 17:21, Beard, Shawn M. wrote: > I have an app running in tomcat 9 that makes an ssl call to an external > webservice. > >   > > It fails with these errors in the logs: > > ERROR javax.net.ssl.SSLHandshakeException: PKIX path building failed: > sun.security.provider.certpath.SunCert

RE: Tomcat and SSL

2011-03-03 Thread jvr
Yes, this helps me. Thank You. -Original Message- From: peter.crowth...@googlemail.com [mailto:peter.crowth...@googlemail.com] On Behalf Of Peter Crowther Sent: jueves, 03 de marzo de 2011 0:48 To: Tomcat Users List Subject: Re: Tomcat and SSL On 2 March 2011 15:56, jvr wrote: >

Re: Tomcat and SSL

2011-03-02 Thread Peter Crowther
On 2 March 2011 15:56, jvr wrote: > My question: > > If I'm not using JK Connector is mandatory configure tomcat as stand-alone > server? > > or, although I'm not using JK Connector I could consider Apache like the > primary web server? > > If you are not *somehow* forwarding requests from your p

RE: Tomcat and SSL

2011-03-02 Thread jvr
Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] Sent: miércoles, 02 de marzo de 2011 15:06 To: Tomcat Users List Subject: RE: Tomcat and SSL > From: jvr [mailto:jvr...@gmail.com] > Subject: RE: Tomcat and SSL > Then I don't have to configure tomcat with SSL Configuration HOW-T

RE: Tomcat and SSL

2011-03-02 Thread Caldarale, Charles R
> From: jvr [mailto:jvr...@gmail.com] > Subject: RE: Tomcat and SSL > Then I don't have to configure tomcat with SSL > Configuration HOW-TO as stand-alone web server If you're intending to have Tomcat service SSL requests, then you do have to configure it to fo

RE: Tomcat and SSL

2011-03-02 Thread jvr
erver, although I don't use jk connector. Only correct the 8443 port issue, isn't it? Thank You. Regards. -Original Message- From: Mark Thomas [mailto:ma...@apache.org] Sent: miércoles, 02 de marzo de 2011 12:08 To: Tomcat Users List Subject: Re: Tomcat and SSL On 02/03/2011 10

Re: Tomcat and SSL

2011-03-02 Thread Mark Thomas
On 02/03/2011 10:59, jvr wrote: > If I go to > http://www. domain.net:4848/applservlet/greeting > with the browser I could see the servlet. > > But If I go to > https://www. domain.net:8443/applservlet/greeting > I'm being redirected to PLESK. Then there is an issue with your hosting environment

Re: Tomcat and SSL Certifcates

2008-04-15 Thread Bill Barker
If you really did follow the links, then the easiest is to continue to use OpenSSL. Assuming that you have already set up an OpenSSL CA, then just sign the CRS as normal, and send the resulting cert file back to the client. They will need to import it into their keystore file (which should be n

Re: RE Tomcat and SSL

2006-04-14 Thread Franck UB
Hi Klaus, > coming back to my issue: How can I make sure that my certificate is > right for tomcat? Could I attach it at one of these eMails? Or are > attachments not allowed? Could you test it? I think this could be one solution. Today I am not in office. But you can send your stuff to [EMAI

Re: RE Tomcat and SSL

2006-04-13 Thread Klaus-F. Kaal
Hi Franck, coming back to my issue: How can I make sure that my certificate is right for tomcat? Could I attach it at one of these eMails? Or are attachments not allowed? Could you test it? Would be great. Thanks Klaus Klaus-F. Kaal schrieb: Franck, I changed that and restartet Tomcat.

Re: RE Tomcat and SSL

2006-04-13 Thread Klaus-F. Kaal
Franck, I changed that and restartet Tomcat. No different reading in the logs Klaus Franck Borel schrieb: Does that tell you more? Not really. But I think you must augment the debug value to 99: Better? -- Franck --

Re: RE Tomcat and SSL

2006-04-13 Thread Franck Borel
Does that tell you more? Not really. But I think you must augment the debug value to 99: Better? -- Franck - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: RE Tomcat and SSL

2006-04-13 Thread Klaus-F. Kaal
Hi Franck, yes, I am using Java 1.5 ONLY I fitted in the catalina.sh the statement you suggested. In my opinion, it didn't change anything in the log. This now looks like this: --- 13.04.2006 14:00

Re: RE Tomcat and SSL

2006-04-13 Thread Franck Borel
Another suggestion: Be sure that you are using only one Java version and that this version is > 1.4.1 (there is a known bug with this version if you use it with JSSE). Another idea is to use the -Djavax.net.debug=all flag. I never try this, but it should help you to get more information about

Re: RE Tomcat and SSL

2006-04-13 Thread Klaus-F. Kaal
Franck, I suspect that my way of creating the key could be the problem. Do you have an idea where I could find a "dummy" key for just checking, my key is not the problem. It should be a key which is already working with tomcat. Thanks Klaus Klaus-F. Kaal schrieb: Yes, Franck, I am "root

Re: RE Tomcat and SSL

2006-04-13 Thread Klaus-F. Kaal
Yes, Franck, I am "root" when I run key-creation and tomcat... Franck Borel schrieb: Next suggestion: Did you make the key as root? And do you start Tomcat as root? -- Franck Yes, in testphase, I do all pw's in low-cases... Franck Borel schrieb: Hi Klaus, Good Morning Franck, yesterday

Re: RE Tomcat and SSL

2006-04-13 Thread Franck Borel
Next suggestion: Did you make the key as root? And do you start Tomcat as root? -- Franck Yes, in testphase, I do all pw's in low-cases... Franck Borel schrieb: Hi Klaus, Good Morning Franck, yesterday, you did a great job, trying to help me. I appreciate that! Thanks. But... I am runn

Re: RE Tomcat and SSL

2006-04-13 Thread Klaus-F. Kaal
Yes, in testphase, I do all pw's in low-cases... Franck Borel schrieb: Hi Klaus, Good Morning Franck, yesterday, you did a great job, trying to help me. I appreciate that! Thanks. But... I am running out of ideas. Regarding the password: presently, I am using "changeit" for everything (

Re: RE Tomcat and SSL

2006-04-13 Thread Franck Borel
Hi Klaus, Good Morning Franck, yesterday, you did a great job, trying to help me. I appreciate that! Thanks. But... I am running out of ideas. Regarding the password: presently, I am using "changeit" for everything (just to get in running), but I still have no success. Yesterday, I sent an

Re: RE Tomcat and SSL

2006-04-12 Thread Klaus-F. Kaal
Good Morning Franck, yesterday, you did a great job, trying to help me. I appreciate that! But... I am running out of ideas. Regarding the password: presently, I am using "changeit" for everything (just to get in running), but I still have no success. Yesterday, I sent anouther eMail explaini

Re: RE Tomcat and SSL

2006-04-12 Thread Franck Borel
Hi Klaus, Hi Franck, still tomcat moans that the keystore was tampered or password was incorrect. I am not sure about the password. With all questions, I gave my own and allways the same. Was that correct? Yes, use your own password. 'Changeit' is only an example which is principally used f

Re: RE Tomcat and SSL

2006-04-12 Thread Min Huang
Awesome. I had spent like 3 hours fiddling with Tomcat and SSL. I followed the directions at http://tomcat.apache.org/tomcat-5.0-doc/ssl-howto.html, but it turns out if you include the className attribute, you'll get an InvocationTargetException and Tomcat will fail to start =( So make sure yo

Re: RE Tomcat and SSL

2006-04-12 Thread Klaus-F. Kaal
Hi, thank you very much for all your effords, but it still does'nt work. That is what I do: CREATE KEY: -- ../../java/bin/keytool -genkey -alias tomcat -keyalg RSA -keystore /opt/wt24/apache-to

Re: RE Tomcat and SSL

2006-04-12 Thread tschaeffer
"Klaus-F. Kaal" <[EMAIL PROTECTED]> wrote on 04/12/2006 11:11:16 AM: > Hi Franck, still tomcat moans that the keystore was tampered or password > was incorrect. > > I am not sure about the password. With all questions, I gave my own and > allways the same. Was that correct? > > Klaus > > >

Re: RE Tomcat and SSL

2006-04-12 Thread Klaus-F. Kaal
Hi Franck, still tomcat moans that the keystore was tampered or password was incorrect. I am not sure about the password. With all questions, I gave my own and allways the same. Was that correct? Klaus Franck Borel schrieb: Sorry to disturb you again, but all the entries in my server.xm

Re: RE Tomcat and SSL

2006-04-12 Thread Franck Borel
Sorry to disturb you again, but all the entries in my server.xml do not seem to be the problem. *At present, TOMCAT states, that my .keystore was tampered or my password was incorrect.* But I did everything over and over again, and right! My trouble is that there are lots of descriptions o

Re: RE Tomcat and SSL

2006-04-12 Thread Klaus-F. Kaal
Sorry to disturb you again, but all the entries in my server.xml do not seem to be the problem. *At present, TOMCAT states, that my .keystore was tampered or my password was incorrect.* But I did everything over and over again, and right! My trouble is that there are lots of descriptions of

Re: RE Tomcat and SSL

2006-04-12 Thread Franck Borel
Hi Klaus, Hi Franck, thank you for your hint. But I am not sure, which parameter is which file. To make things clear, here my procedure: > openssl req -x509 -newkey rsa:512 -keyout ./demoCA/private/cakey.pem -out ./dem

Re: RE Tomcat and SSL

2006-04-12 Thread Klaus-F. Kaal
Hi Franck, thank you for your hint. But I am not sure, which parameter is which file. To make things clear, here my procedure: > openssl req -x509 -newkey rsa:512 -keyout ./demoCA/private/cakey.pem -out ./demoCA/cacert.pe

Re: RE Tomcat and SSL

2006-04-12 Thread Franck Borel
Hi, I solved that problem. Now running in a new one: I have changed the file server.xml and set port 8080 to 80. I uncommented the SSL section and configured the port to 443. Now I expect Tomcat to run on port 80 (what is does), and that, when I call the same URL with "https", that it calls

Re: RE Tomcat and SSL

2006-04-12 Thread Klaus-F. Kaal
Hi, I solved that problem. Now running in a new one: I have changed the file server.xml and set port 8080 to 80. I uncommented the SSL section and configured the port to 443. Now I expect Tomcat to run on port 80 (what is does), and that, when I call the same URL with "https", that it calls

RE RE Tomcat and SSL

2006-04-12 Thread Denis . COCHET
cc Veuillez répondre Objet à RE Tomcat and SSL "Tomcat Users

RE Tomcat and SSL

2006-04-12 Thread Klaus-F. Kaal
Thanks, I now created a keystore for TOMCAT. But still, when I start TOMCAT, I get the message: -- SCHWERWIEGEND: Error starting endpoint java.io.FileNotFoundException: /root/.keystore (No such file or directory) at java.io.File

RE Tomcat and SSL

2006-04-12 Thread Denis . COCHET
maybe "changeit" ! "Klaus-F. Kaal" <[EMAIL PROTECTED] ogic.com>