1
vote
0answers
14 views

Maven - resolving “java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors”

I am attempting to build/install this project on an Ubuntu 12.04 box: https://bitbucket.org/petermr/pdf2svg However: mvn clean install Fails to build due to getting errors like this: ...
4
votes
2answers
392 views

your security settings have blocked a self-signed application from running

I'm trying to use Integrated Lights-Out 2 (aka iLO)'s Virtual Media (which is Java based applet) and I'm getting following error(s): Application Blocked by Security Settings Your security settings ...
0
votes
0answers
29 views

IIS blocking out 2 way SSL cert to Weblogic

We have a IIS server accepting requests on a public IP. IIS forwards the requests over to a Weblogic server. However when we have a client who is passing the cert (to make 2 way SSL work), IIS seems ...
1
vote
1answer
125 views

SSL Connect timing out during handshake (client exchange re-transmission)

We have a Java LDAP client making SSL connection to AD. Some times the connect hangs with client and server re-transmitting Client Key Exchange and ACK packets continuously as shown below and ...
1
vote
1answer
148 views

Getting JMX working under Tomcat 7 with SSL and a self-signed cert

I'm trying to get JMX working under Tomcat 7.0.23 with SSL. The servers are located in AWS, which means all the hosts are NATed, and I need to use JmxRemoteLifecycleListener to explicitly set the two ...
1
vote
1answer
183 views

java keystore can't validate URL

With the same url, this ends up giving a verify return code 20 (unable to get local issuer of certificate): openssl s_client -connect $URL:443 -showcerts -CAfile /etc/ssl/certs/java/cacerts This ...
1
vote
1answer
714 views

JBoss https on port other than 8080 not working

We have a server with two JBoss instances where one runs on 8080, the other on 8081. We need to have HTTPS enabled for the 8081 server, firstly we tried enabling https on the 8080 port instance by ...
0
votes
1answer
303 views

Tomcat “connection interrupted” with ssl

I can access Tomcat on port 8080, but not on 8443. When I try o get there, this is the error I get in Firefox: The connection was interrupted The connection to the.fqdn.com:8443 was interrupted ...
2
votes
1answer
746 views

Configure jboss web application to support SSL

I have a Spring JSF web application which is deployed in JBoss6 Application Server which I want to add SSL(i.e. https). How would I do this in Proper manner with JBoss6? I've enabled the ...
0
votes
1answer
2k views

Unable to find valid certification path to requested target while CAS authentication

I'm trying to configure CAS authentication. It requires both CAS and client application to use HTTPS protocol. Unfortunately we should use self-signed certificate (with CN that doesn't have anything ...
1
vote
1answer
259 views

Is there a way to change the string format for an existing CSR “Country Code” field from UTF8 to Printable String?

CentOS 5.x The short version: Is there a way to change the encoding format for an existing CSR "Country Code" field from UTF8 to Printable String? The long version: I've got a CSR generated ...
1
vote
2answers
164 views

x86 KSSL benchmarks for SSL-enabled Java app

So; Java's SSL implementation is not particularly quick under most circumstances. I've seen blogs demonstrating noticeable speedups when a Java app is moved to Solaris to take advantage of its ...
0
votes
1answer
170 views

Restrict Client Certificate except for some pages in ASP.NET / IIS 7 or Jsp / Apache / Tomcat

In IIS you can force client certificate request mais can it exclude some pages ? How is it by coding (sample code somewhere ?) or by configuration ? Same question for Apache / Java
1
vote
2answers
1k views

Clearing Java certificates cache (force reload certificates)

A simple question here. One application gave me this exception when trying to access a website with a expired certificate: java.security.cert.CertificateExpiredException So, I renewed the ...
1
vote
1answer
698 views

Active Directory Certificate Import Successful, but LDAP Authentication Still Fails

I'm having a difficult time getting to the root of this issue. We use LDAP for authentication purposes across several services, confluence, bamboo, sonar, gerrit, etc.. Our LDAP service provider is ...
2
votes
2answers
2k views

How to speed up SSLHandshake?

I have a java application that makes an SSL connection to a remote server. When I run the application from my development machine (which is geographically closer to the remote server, on a different ...
2
votes
1answer
1k views

How can webapps within Apache Tomcat use SSL/TLS client-certificate authentication as clients?

I am using Apache Tomcat webapp as a client (java) to an IIS hosted webservice. I need to use SSL with client authentication. What kind of matching criteria is used by the client to send a client ...
0
votes
0answers
754 views

Connecting to MySQL server via SSL using JDBC

I'm trying to set up access to remote mysql server secured by SSL. So far mysql client works flawlessly but I get exception when connecting via JDBC. For now I'm testing it on my local machine. ...
1
vote
1answer
275 views

Can I restrict SSL access to Tomcat by Extended Key Usage?

I'd like to restrict the SSL access to a Tomcat instance using certificates, and not relying on any "user" accounts. I have a CA which is being used to sign the certificates, but if I configure ...
3
votes
2answers
3k views

Access keystore on Sun ONE Webserver 6.1 for 2048 bit key length SSL

We want to get 2048 bit key length CSR requests. The browser based GUI provides us with a 1024 bit CSR and I don't know how to change that. It seems that 1024 bit key lengths will no longer ...
4
votes
2answers
6k views

what is .crt and .key and how can I generate them?

SSLEngine on SSLCertificateFile /etc/httpd/conf/login.domain.com.crt SSLCertificateKeyFile /etc/httpd/conf/login.domain.com.key SSLCipherSuite ALL:-ADH:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP ...
0
votes
1answer
389 views

Tomcat handles http with port 443 and don't https !

have a misunderstanding what's going on with Tomcat! I have my app deployed as ROOT.war on Tomcat. Have one URL that I want to be reached only via SSL. Tomcat process this URL good: ...
1
vote
1answer
377 views

Creating a SSL certificate from a request / response pair

I am in possession of the following and am attempting to create an SSL certificate to be used on an Apache Tomcat server. Usually I would generate the certificate request using keytool. However, in ...
4
votes
1answer
824 views

Mysql, SSL and java client problem

I'm trying to connect to an SSL-enabled mysql server from my own java application. After setting up ssl on mysqld, and successfuly tested an account using "REQUIRE ISSUER and SUBJECT", I wanted to use ...