Tagged Questions

0
votes
0answers
147 views

Tomcat7- How to configure one VHost-> port 8443(SSL) and another VHost--> port 8080(non SSL)

I have installed Tomcat 7 and java 1.6 on my Ubuntu 12.04 x64 VPS. I am trying to set up a tomcat 7 server in this way- domain1.com--> is a vhost with its own deployment directory. domain2.com--> is ...
1
vote
1answer
77 views

java keystore can't validate URL

With the same url, this ends up giving a verify return code 20 (unable to get local issuer of certificate): openssl s_client -connect $URL:443 -showcerts -CAfile /etc/ssl/certs/java/cacerts This ...
0
votes
0answers
67 views

Tomcat SSL: CA certificate from keytool

I created a certificate to provide SSL access to a Apache Tomcat instance using keytool: PS C:\Programme\Java\jre7\bin> .\keytool.exe -genkey -v -keyalg RSA -alias tomcat -keypass changeit ...
1
vote
1answer
514 views

JBoss https on port other than 8080 not working

We have a server with two JBoss instances where one runs on 8080, the other on 8081. We need to have HTTPS enabled for the 8081 server, firstly we tried enabling https on the 8080 port instance by ...
0
votes
1answer
154 views

Tomcat “connection interrupted” with ssl

I can access Tomcat on port 8080, but not on 8443. When I try o get there, this is the error I get in Firefox: The connection was interrupted The connection to the.fqdn.com:8443 was interrupted ...
2
votes
1answer
511 views

Configure jboss web application to support SSL

I have a Spring JSF web application which is deployed in JBoss6 Application Server which I want to add SSL(i.e. https). How would I do this in Proper manner with JBoss6? I've enabled the ...
0
votes
1answer
922 views

Unable to find valid certification path to requested target while CAS authentication

I'm trying to configure CAS authentication. It requires both CAS and client application to use HTTPS protocol. Unfortunately we should use self-signed certificate (with CN that doesn't have anything ...
1
vote
1answer
142 views

Is there a way to change the string format for an existing CSR “Country Code” field from UTF8 to Printable String?

CentOS 5.x The short version: Is there a way to change the encoding format for an existing CSR "Country Code" field from UTF8 to Printable String? The long version: I've got a CSR generated ...
1
vote
2answers
101 views

x86 KSSL benchmarks for SSL-enabled Java app

So; Java's SSL implementation is not particularly quick under most circumstances. I've seen blogs demonstrating noticeable speedups when a Java app is moved to Solaris to take advantage of its ...
0
votes
1answer
112 views

Restrict Client Certificate except for some pages in ASP.NET / IIS 7 or Jsp / Apache / Tomcat

In IIS you can force client certificate request mais can it exclude some pages ? How is it by coding (sample code somewhere ?) or by configuration ? Same question for Apache / Java
1
vote
1answer
559 views

Clearing Java certificates cache (force reload certificates)

A simple question here. One application gave me this exception when trying to access a website with a expired certificate: java.security.cert.CertificateExpiredException So, I renewed the ...
1
vote
1answer
566 views

Active Directory Certificate Import Successful, but LDAP Authentication Still Fails

I'm having a difficult time getting to the root of this issue. We use LDAP for authentication purposes across several services, confluence, bamboo, sonar, gerrit, etc.. Our LDAP service provider is ...
1
vote
2answers
2k views

How to speed up SSLHandshake?

I have a java application that makes an SSL connection to a remote server. When I run the application from my development machine (which is geographically closer to the remote server, on a different ...
2
votes
1answer
701 views

How can webapps within Apache Tomcat use SSL/TLS client-certificate authentication as clients?

I am using Apache Tomcat webapp as a client (java) to an IIS hosted webservice. I need to use SSL with client authentication. What kind of matching criteria is used by the client to send a client ...
0
votes
0answers
575 views

Connecting to MySQL server via SSL using JDBC

I'm trying to set up access to remote mysql server secured by SSL. So far mysql client works flawlessly but I get exception when connecting via JDBC. For now I'm testing it on my local machine. ...
1
vote
1answer
216 views

Can I restrict SSL access to Tomcat by Extended Key Usage?

I'd like to restrict the SSL access to a Tomcat instance using certificates, and not relying on any "user" accounts. I have a CA which is being used to sign the certificates, but if I configure ...
3
votes
2answers
3k views

Access keystore on Sun ONE Webserver 6.1 for 2048 bit key length SSL

We want to get 2048 bit key length CSR requests. The browser based GUI provides us with a 1024 bit CSR and I don't know how to change that. It seems that 1024 bit key lengths will no longer ...
2
votes
2answers
3k views

what is .crt and .key and how can I generate them?

SSLEngine on SSLCertificateFile /etc/httpd/conf/login.domain.com.crt SSLCertificateKeyFile /etc/httpd/conf/login.domain.com.key SSLCipherSuite ALL:-ADH:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP ...
0
votes
1answer
323 views

Tomcat handles http with port 443 and don't https !

have a misunderstanding what's going on with Tomcat! I have my app deployed as ROOT.war on Tomcat. Have one URL that I want to be reached only via SSL. Tomcat process this URL good: ...
1
vote
1answer
355 views

Creating a SSL certificate from a request / response pair

I am in possession of the following and am attempting to create an SSL certificate to be used on an Apache Tomcat server. Usually I would generate the certificate request using keytool. However, in ...
4
votes
1answer
700 views

Mysql, SSL and java client problem

I'm trying to connect to an SSL-enabled mysql server from my own java application. After setting up ssl on mysqld, and successfuly tested an account using "REQUIRE ISSUER and SUBJECT", I wanted to use ...