| 00:00.03 | jasonb | sander-zzz: If you could paste it to a paste server, I would gladly have a look at it. |
| 00:00.48 | sander-zzz | jasonb: I'll do that in the morning if you don't mind. Need to walk the dog and get into bed... |
| 00:03.44 | jasonb | sander-zzz: No prob. Whenever you want. :) |
| 00:53.11 | *** join/#tomcat aex (~aex@c-2bbae253.04-109-73766c10.cust.bredbandsbolaget.se) |
| 00:55.51 | aex | Is it somehow possible to get http://domain/path/* point to /* on the tomcat worker with mod_jk? It always goes to /path/* on the worker no matter what I try... |
| 02:16.25 | *** part/#tomcat spencer (tspencer@adara.cs.pdx.edu) |
| 02:33.46 | *** join/#tomcat iq (~iq@70-59-163-239.omah.qwest.net) |
| 02:55.48 | *** join/#tomcat iq[laptop] (~iq@70-59-163-239.omah.qwest.net) |
| 03:27.41 | *** join/#tomcat majic (~majic@nc-69-69-52-5.sta.sprint-hsd.net) |
| 03:28.17 | majic | why was there a 5.5.8 alpha and then like the next week a 5.5.9 alpha released? That doesn't make sense to me. |
| 03:48.42 | *** part/#tomcat majic (~majic@nc-69-69-52-5.sta.sprint-hsd.net) |
| 04:00.46 | *** join/#tomcat valmont (~chrisholl@lsanca1-ar8-4-43-221-040.lsanca1.elnk.dsl.genuity.net) |
| 04:02.24 | *** join/#tomcat jasonb (noneoyerbi@adsl-66-124-73-250.dsl.sntc01.pacbell.net) |
| 04:57.11 | *** join/#tomcat simplebird (~lind@user-12ldaq6.cable.mindspring.com) |
| 05:00.48 | *** join/#tomcat harpoon (stueber@ultra20.rbg.informatik.tu-darmstadt.de) |
| 05:11.44 | *** join/#tomcat MarkT (~Mark@markt.user) |
| 05:15.59 | *** join/#tomcat nichoj (~nichoj@cpe-24-194-46-95.nycap.res.rr.com) |
| 05:16.49 | *** join/#tomcat iq (~iq@70-59-163-239.omah.qwest.net) |
| 05:24.53 | nichoj | is there a way to get which user ran a particular servlet based on its ServletRequest? |
| 05:32.52 | harpoon | nichoj: You can analyse |
| 05:33.08 | harpoon | Cookies, hostip |
| 05:34.01 | harpoon | nearly evrything a browser sends with request |
| 05:34.34 | nichoj | i setup a security restraint, so i'm trying to figure out which tomcat user logged in so i can log it with a ServletFilter |
| 05:35.28 | harpoon | if user has to identify him/herself |
| 05:35.31 | harpoon | yes |
| 05:36.08 | harpoon | but you have to put the information in sessiondata, because HTTP is stateless |
| 05:36.18 | nichoj | how would i go about doing it then? i'm using the BASIC login auth-method |
| 05:49.41 | harpoon | sorry, normaly I use a UserDB |
| 05:51.38 | harpoon | The easiest way would be, to place some kind of information in the session |
| 05:51.50 | harpoon | if authentication is succesful |
| 05:52.09 | nichoj | think i found it... HttpServletRequest has a getUserPrincipal, and the principal has the authenticated user name |
| 05:55.50 | harpoon | that's a way too |
| 06:07.43 | nichoj | sweet, got it working. thanks for the tips |
| 06:08.27 | aex | Is it possible to get http://domain/path/* point to /* on the tomcat worker with mod_jk? It always goes to /path/* on the worker no matter what I try... |
| 07:03.23 | *** join/#tomcat loquace (~seb@aqu33-1-82-233-55-6.fbx.proxad.net) |
| 07:04.18 | loquace | morning |
| 07:13.29 | *** join/#tomcat aex_ (~christian@proxy.datavis.se) |
| 07:40.59 | *** join/#tomcat linuxfreck (~freck@p5492A676.dip0.t-ipconnect.de) |
| 08:04.31 | *** join/#tomcat kool (~kamal@61.247.233.207) |
| 08:10.04 | *** join/#tomcat staffan (~chatzilla@h205n2fls32o837.telia.com) |
| 08:18.55 | *** join/#tomcat noodl (hidden-use@195-97-225-122.onyx.net) |
| 08:33.41 | *** join/#tomcat joered (~chatter@81-208-74-182.fastres.net) |
| 09:30.04 | *** join/#tomcat teite (shu@sun-shu.ision.net) |
| 09:30.06 | teite | hi |
| 09:30.18 | teite | how do i setup the jvm memory parameter with tomcat? |
| 09:31.03 | teite | is there any canonical way? ;) |
| 09:46.59 | *** join/#tomcat kyle (~gnuprophe@66.111.46.209) |
| 09:47.53 | kyle | hi ppl :) |
| 09:48.33 | kyle | i'm having a weird error here seting up apache2+tomcat4 |
| 09:49.02 | kyle | I get a 500 error when accesing any .jsp file |
| 09:49.10 | kyle | and apacher error_log shows this: |
| 09:49.12 | kyle | [Tue Apr 05 11:33:05 2005] [error] uriEnv.init() map to invalid worker /*.jsp-0 ajp13:localhost:8009 |
| 09:49.14 | kyle | [Tue Apr 05 11:33:17 2005] [error] mod_jk2.handle() No worker for /index.jsp |
| 09:49.20 | kyle | any tips on that? :-) |
| 09:54.36 | lyken | um |
| 09:54.46 | lyken | http://groups.google.com.au/groups?q=+mod_jk2.handle()+No+worker+for&hl=en&lr=&client=firefox-a&rls=org.mozilla:en-US:official&selm=1098242072%40f21.n5042.z2.ftn&rnum=1 |
| 09:54.53 | lyken | ignore the fact its russian :0 |
| 09:55.01 | lyken | look half way down |
| 09:55.32 | lyken | i think.. |
| 09:57.07 | kyle | groups... I didn't think on that :-) |
| 09:57.09 | kyle | let's see |
| 09:58.34 | lyken | :) |
| 10:04.41 | kyle | i'm still not seen anythink remarkable... |
| 10:05.20 | kyle | config seems OK; tomcat is listening on 8009, I have a fine workers2.properties, apache config seems to be ok... |
| 10:15.15 | *** part/#tomcat noodl (hidden-use@195-97-225-122.onyx.net) |
| 11:39.26 | *** join/#tomcat Slackman (~mase@217.169.25.114) |
| 12:13.04 | *** join/#tomcat harpoon (stueber@ultra19.rbg.informatik.tu-darmstadt.de) |
| 12:39.44 | Slackman | why won't any of my other servlet mappings work when i have the invoker script enabled? |
| 12:39.48 | Slackman | tomcat 5.5 |
| 12:49.30 | *** join/#tomcat Cybertnt (~Cybertnt@wiwi-wi1-154.wiwi.uni-augsburg.de) |
| 12:50.40 | Cybertnt | Hey, i am using Tomcat 5.5.7 and Windows 2003 Server. I wanted to change the appBase to d:\www in the server.xml but all variants of it dont work (i.e. tomcat doesnt display the page in d:\www\ROOT\index.html) |
| 12:51.05 | Cybertnt | what path would i need to set for the attribute appBase? |
| 12:55.41 | Slackman | i'm assuming you did restart tomcat after you made the change? (you'd be surprised) |
| 13:00.41 | Cybertnt | yes |
| 13:08.07 | *** join/#tomcat [MarkT] (~Mark@pcp0010619330pcs.tybout01.de.comcast.net) |
| 13:18.39 | kyle | Cybertnt: what about apache? |
| 13:21.08 | Cybertnt | what about it? |
| 13:21.33 | kyle | *html files are not managed by tomcat |
| 13:21.42 | kyle | have you changed your apache's documentroot? |
| 13:21.47 | kyle | restarted it? |
| 13:21.52 | Cybertnt | tomcat can display static content though |
| 13:22.10 | lyken | so |
| 13:22.40 | Cybertnt | anyway i got it to work now, i forgot to create the WEB-INF folder |
| 13:36.20 | *** join/#tomcat Alexys (~Alexys@201.245.8.206) |
| 13:39.27 | Alexys | jasonb, buenos dias, estas ocupado? puedo hacerte una consulta? |
| 13:48.16 | *** join/#tomcat KillerDOC (~KillerDOC@mcut-b-016.resnet.purdue.edu) |
| 13:49.58 | *** join/#tomcat linuxfreck (~freck@p5492A676.dip0.t-ipconnect.de) |
| 13:59.38 | KillerDOC | I am having problems with server.xml: I want to be able to use the directory /var/www/localhost/htdocs and have tried various methods with jk2 but none seem to work reliably |
| 14:03.34 | linuxfreck | use? so you want to have your web application and jsp pages in that directory? |
| 14:03.47 | KillerDOC | yes |
| 14:04.02 | linuxfreck | what do you mean, it doesn't work reliably |
| 14:04.58 | KillerDOC | I was able to get the ~/public_home/ dirs to work with adding <Listener ... /> settings to server.xml |
| 14:05.21 | KillerDOC | but I do not know how to get the /var/www/localhost/htdocs dir to work also |
| 14:08.47 | KillerDOC | this is what I added to server.xml to get ~/public_html dirs to work: |
| 14:08.50 | KillerDOC | <PROTECTED> |
| 14:08.50 | KillerDOC | <PROTECTED> |
| 14:08.50 | KillerDOC | <PROTECTED> |
| 14:13.00 | linuxfreck | just set the default context |
| 14:16.07 | linuxfreck | like <Context path="" docBase="/var/www/localhost/htdocs" /> within <Host> |
| 14:16.13 | linuxfreck | this is untested though |
| 14:16.22 | KillerDOC | oh ok, i will try it |
| 14:18.56 | KillerDOC | hey! it works, thanks alot |
| 14:19.28 | linuxfreck | np |
| 14:54.41 | *** join/#tomcat doc|work (~doc@skynet.csn.ul.ie) |
| 14:56.09 | pucko | hmmmm |
| 14:56.09 | *** join/#tomcat MarkT (~Mark@pcp0010619330pcs.tybout01.de.comcast.net) |
| 14:56.35 | pucko | it should be possible to run php under tomcat, no? |
| 14:58.18 | linuxfreck | tomcat is made for servlets and jsp pages, but you can make php work using their cgi stuff |
| 14:59.06 | doc|work | has anyone reported problems with the jakarta-tomcat-5.0.28-src.tar.gz file? I've been getting "tar: A lone zero block at 39280 |
| 14:59.10 | linuxfreck | if you need to support mod_php or have a lot of php stuff, using the apache httpd and mod_jk is probably better |
| 14:59.19 | doc|work | while trying to untar it but the md5sums match |
| 14:59.46 | linuxfreck | doc|work: I have that on jakarta .tar.gz files, too |
| 14:59.53 | linuxfreck | doesn't seem to be a problem though |
| 15:00.07 | doc|work | linuxfreck: hmmm, ok, weird. so it should be fine? |
| 15:00.17 | linuxfreck | i think so |
| 15:00.26 | doc|work | ok, will wander on regardless. thanks |
| 15:01.47 | Slackman | i have a bunch of jsp pages here, should i just be able to put the folder inside of /tomcat_home/webapps/ restart tomcat |
| 15:02.02 | Slackman | then goto localhost:8080/foldername/blarn.jsp? |
| 15:02.10 | Slackman | or do i need to do something else? |
| 15:05.51 | linuxfreck | should be enough, Slackman |
| 15:06.25 | Slackman | hmm odd..it didn't work..i made a war file out of them and it is at least seeing the dir now |
| 15:11.54 | *** join/#tomcat FreemaniaX (~Freemania@ip67-153-106-58.z106-153-67.customer.algx.net) |
| 15:57.31 | *** join/#tomcat bugfixer (~bugfixer@42gis175.gulftel.com) |
| 15:59.54 | *** join/#tomcat a4akb (bbwpleaser@as4-46.qualitynet.net) |
| 16:53.27 | *** join/#tomcat randrew (~raj@dolmen.cc.columbia.edu) |
| 17:07.34 | *** join/#tomcat a4akb (bbwpleaser@as21-68.qualitynet.net) |
| 17:12.12 | *** part/#tomcat randrew (~raj@dolmen.cc.columbia.edu) |
| 17:13.13 | *** join/#tomcat randrew (~raj@dolmen.cc.columbia.edu) |
| 17:38.24 | *** join/#tomcat lmazzella (~lmazzella@216.150.147.61) |
| 17:38.38 | lmazzella | sup |
| 17:57.42 | *** join/#tomcat jasonb (noneoyerbi@adsl-66-124-73-250.dsl.sntc01.pacbell.net) |
| 18:08.10 | *** join/#tomcat thepiper (~thepiper@65.45.187.181) |
| 18:08.29 | thepiper | does anyone know how to get the system tray icon to start when tomcat starts as a windows service? |
| 18:09.37 | *** join/#tomcat iq (~iq@65-103-165-234.omah.qwest.net) |
| 18:24.01 | lmazzella | hey jasonb |
| 18:31.25 | jasonb | lmazzella: Hi. |
| 18:45.45 | *** join/#tomcat Valentin- (~jhiemer@pD9EABF45.dip.t-dialin.net) |
| 19:05.18 | Valentin- | it's quite inside here |
| 19:08.12 | lmazzella | jasonb, i got the certificate setup on my tomcat; remember i was asking you the other day and you advised to create cert on a different machine then xfer it to the production box |
| 19:08.35 | lmazzella | but when i enable SSL on tomcat, tomcat doesnt work |
| 19:15.10 | *** join/#tomcat Flewellyn (~aablackm@ideaone-245-2.ideaone.net) |
| 19:15.36 | Flewellyn | Hi, folks. I'm wondering...what could cause Tomcat not to see a class file, even if it's in a jar in the WAR file? |
| 19:16.47 | Flewellyn | Oh, wait...never mind. I think I just found the problem. |
| 19:16.49 | Flewellyn | Sorry to bother. |
| 19:16.50 | *** part/#tomcat Flewellyn (~aablackm@ideaone-245-2.ideaone.net) |
| 20:10.33 | jasonb | lmazzella: What does it say? An error? |
| 20:11.50 | lmazzella | hmmm it just doesnt load, and pages through 8080 dont load either |
| 20:12.04 | jasonb | lmazzella: And what do your tomcat logs say? |
| 20:12.52 | jasonb | lmazzella: Use http://www.rafb.net/paste to paste in your logs & configs so we can see them in order to figure out what's going on. |
| 20:13.32 | lmazzella | i dont see anything weird in logs |
| 20:15.04 | jasonb | lmazzella: So paste your server.xml into the paste server. |
| 20:22.40 | lmazzella | jasonb, check it out --> |
| 20:22.42 | lmazzella | http://www.rafb.net/paste/results/fBuKon15.html |
| 20:27.05 | omgs | lmazzella: the certificate must be enclosed in the connector section, with https |
| 20:27.31 | lmazzella | omgs: I dont understand |
| 20:27.51 | jasonb | lmazzella: If you want to use the HTTP connector, you must configure Tomcat for it. |
| 20:27.54 | lmazzella | isnt the .keystore there? |
| 20:28.18 | lmazzella | I have both http and https uncommented out, no? |
| 20:28.42 | jasonb | lmazzella: http://jakarta.apache.org/tomcat/tomcat-4.1-doc/ssl-howto.html |
| 20:28.54 | omgs | no, you have https commented in what you pasted |
| 20:29.10 | lmazzella | oh wait, if its commented out, its because i put the commments back in cause server would go down |
| 20:29.17 | *** join/#tomcat valmont_ (~chrisholl@germany.pspdev.pas.earthlink.net) |
| 20:29.20 | lmazzella | just make believe that the comments are not there |
| 20:29.28 | omgs | Also, you use 8443 for ajp, which I find kinda strange |
| 20:29.43 | jasonb | lmazzella: Okay, where on your filesystem did you place your keystore file? |
| 20:29.57 | lmazzella | 8443 is the default option, I guess I can choose any other port |
| 20:29.58 | omgs | Oh, sorry |
| 20:30.17 | jasonb | lmazzella: Paste your catalina.out log file into the paste server. |
| 20:30.20 | lmazzella | "/root/.keystore |
| 20:30.36 | jasonb | lmazzella: What user do you run Tomcat as? :) |
| 20:30.40 | lmazzella | root |
| 20:30.40 | lmazzella | :) |
| 20:30.48 | *** join/#tomcat striker_ (~striker@striker.nl) |
| 20:32.10 | jasonb | lmazzella: Heh. okay. |
| 20:32.19 | jasonb | lmazzella: You do need <Factory className="org.apache.catalina.net.SSLServerSocketFactory" though. |
| 20:32.35 | lmazzella | isnt that for V 4.0? |
| 20:32.47 | lmazzella | tomcat v. 4.1 uses org.apache.coyote |
| 20:32.53 | lmazzella | as far as i know |
| 20:33.14 | jasonb | Oh, actually, yeah. |
| 20:33.30 | jasonb | hmm.. |
| 20:34.05 | jasonb | Yep, so you're fine with the CoyoteServerSocketFactory. |
| 20:34.57 | lmazzella | i know right, docs aint helping me at all |
| 20:35.00 | jasonb | lmazzella: Okay, so, logs. |
| 20:35.24 | jasonb | Also, how are you starting/stopping tomcat, exactly? |
| 20:35.36 | lmazzella | look what i found in catalina.out |
| 20:35.38 | lmazzella | http://www.rafb.net/paste/results/ApB0tP97.html |
| 20:35.45 | omgs | I remember my first tries setting both http and https, this last didn't work, but http did |
| 20:35.50 | lmazzella | I use bin/shutdown.sh and /bin/startup.sh |
| 20:36.15 | jasonb | lmazzella: So your keystore password in server.xml is wrong. |
| 20:36.45 | jasonb | lmazzella: Between running shutdown.sh and startup.sh what do you do? |
| 20:37.16 | lmazzella | no it cant be wrong |
| 20:37.38 | lmazzella | I run both sh scripts followed by one another |
| 20:37.47 | lmazzella | so I would edit server.xml then run shutdown.sh then startup.sh |
| 20:39.05 | lmazzella | I thought that the Java Sockets Extension (JSSE) JAR files were missing from $JAVA_HOME/jre/lib/ext so I downloaded them from java.sun.com and put them there; since Im running JDK lower than 1.4 I need to make sure i have these |
| 20:39.31 | lmazzella | but they were already there; I overwrote them. |
| 20:42.58 | jasonb | lmazzella: You're restarting Tomcat in an unreliable way. |
| 20:43.08 | lmazzella | i must recall that I the cert was produced on a different machine and then xfered to production box |
| 20:43.19 | lmazzella | hmmm. what am i doing wrong |
| 20:43.30 | jasonb | lmazzella: The way you're doing it, you can't be sure that when you attempt to shut Tomcat down that it did indeed shut all the way down. |
| 20:43.40 | lmazzella | ahhh, ok |
| 20:44.29 | lmazzella | how would I have to do it? |
| 20:44.38 | jasonb | lmazzella: Either Tomcat is reading a keystore that you're not intending it to read (containing a different password), or you created the new keystore with a password that isn't the password in your server.xml file. |
| 20:45.01 | jasonb | lmazzella: Each time you go to shut down Tomcat you must make sure the JVM process is gone before starting a new one. |
| 20:45.23 | randrew | jasonb: it looks like 'keystorePass' is misspelled. |
| 20:45.37 | jasonb | randrew: Ahh, well, that would also probably do it. |
| 20:46.09 | jasonb | "keytore"! |
| 20:46.10 | randrew | lmazzella: try s/keytorePass/keystorePass/ |
| 20:46.22 | jasonb | :) |
| 20:46.31 | jasonb | randrew: Good eyes! |
| 20:46.53 | lmazzella | aahhhhhh!!!! |
| 20:48.01 | lmazzella | corrected the misspelled tag |
| 20:48.04 | lmazzella | restarted tomcat |
| 20:48.13 | lmazzella | I now have clean logs in catalina.out |
| 20:48.22 | lmazzella | but I cant access the site |
| 20:48.31 | randrew | jasonb: tomcat needs to be a little more like HAL... I'm sorry, Dave, I can't do that... |
| 20:49.30 | randrew | lmazzella: what do the logs say now? |
| 20:50.01 | lmazzella | http://www.rafb.net/paste/results/vKBNub81.html |
| 20:50.21 | lmazzella | one sec. |
| 20:52.20 | jasonb | randrew: Heh. Tomcat 487.0 Changelog: "Added AI module and hooked it into the config reader." |
| 20:53.10 | jasonb | lmazzella: That log says nothing about 8443. |
| 20:53.22 | lmazzella | http://www.rafb.net/paste/results/YAdw6A43.html |
| 20:53.28 | jasonb | lmazzella: Is your HTTPS connector still commented out? |
| 20:53.29 | lmazzella | when i goto https it times out |
| 20:53.39 | lmazzella | spitting that stuff i pasted |
| 20:55.08 | jasonb | lmazzella: Welp, you're probably at the end of your JDK 1.3 weird-install rope now. |
| 20:56.01 | jasonb | lmazzella: You need an installation of the JVM that is newer, or at least repeatable. You could google on this particular exception but I'll bet you won't find anything about it that you can fix. |
| 20:58.52 | lmazzella | :( |
| 21:00.03 | jasonb | One last thing you could try if you really must: You could try using a JDK 1.3/JSSE on some other machine to generate your keystore, then move *that* to this box and try to use it. |
| 21:00.34 | jasonb | But, in the end, you're going to end up nuking this installation and starting over anyway. |
| 21:01.01 | lmazzella | yeah... |
| 21:01.15 | randrew | lmazzella: long shot... is a cert for the signer of your site certificate in the store? |
| 21:01.36 | lmazzella | i got it from verisign |
| 21:01.52 | randrew | lmazzella: hmm.. |
| 21:02.39 | lmazzella | i did the entire keytool thing on a separate machine, i imported the CA signed from verisign and then moved the keystore to the server |
| 21:03.42 | jasonb | randrew: He'd have a different exception if he just had a misconfigured keystore, I believe. |
| 21:04.00 | omgs | I use pkcs12. I wonder if it's the only possible format for keystores |
| 21:04.10 | jasonb | omgs: Nope, Sun JKS. |
| 21:04.50 | randrew | jasonb: could it be that VeriSign Class 3 which expired in 2004? |
| 21:05.11 | jasonb | randrew: No, since Tomcat would just serve that up and it would be the web client that complains. |
| 21:05.25 | randrew | jasonb: ahh. haven't a clue then : ) |
| 21:05.49 | jasonb | randrew: He has a borked JDK / JSSE installation. |
| 21:06.05 | lmazzella | that's what it looks like |
| 21:06.24 | jasonb | randrew: I just don't know how b0rked it actually is. |
| 21:08.34 | omgs | 36% borked, sure ;) |
| 21:08.40 | lmazzella | :( |
| 21:09.53 | jasonb | lmazzella: Thinking more about it: I'll bet this particular exception is caused by using a newer JDK to generate the keystore, then loading it on an older JDK. You let it default to Sun JKS format? |
| 21:10.21 | jasonb | lmazzella: If so, then you probably can use a JDK 1.3 / JSSE installation on another machine to generate a useable keystore. |
| 21:10.58 | lmazzella | have u had experience requesting Certs from Verisign more than once? |
| 21:11.08 | jasonb | lmazzella: Who, me? |
| 21:11.10 | lmazzella | I mean, I will have to resend my CSR again |
| 21:11.20 | lmazzella | yes, you or the others |
| 21:11.34 | omgs | lmazzella: I don't think you have to do that |
| 21:11.39 | jasonb | Hmm... |
| 21:11.45 | jasonb | depends. |
| 21:12.03 | omgs | Can you try exporting to pkcs12? That's my only experience, and it works |
| 21:12.05 | lmazzella | well, i have to create another keystore, then run keytool -certreq |
| 21:12.13 | jasonb | lmazzella: It is possible to export your *private* key from the keystore you generated when you made your CSR. |
| 21:12.39 | lmazzella | how can i do that |
| 21:12.56 | jasonb | lmazzella: It may actually be easier just to request another certificate from Verisign, but it's also possible to export your private key, then import it into a new keystore, then import your cert. |
| 21:13.31 | jasonb | lmazzella: The deal with this is: keytool does *not* implement any way of exporting your private key. They probably consider that too sensitive of a security concern. |
| 21:13.44 | jasonb | lmazzella: But, with Java code it is possible to export your private key. |
| 21:15.03 | jasonb | lmazzella: If you're not a developer, this will for sure end up being more difficult than just requesting a new cert from Verisign. |
| 21:15.31 | jasonb | lmazzella: But, I believe there are example programs on the net for doing exactly this. |
| 21:16.07 | jasonb | lmazzella: Also, importing it into a new keystore would be a matter of formatting it correctly and then using keytool to import it. |
| 21:16.49 | jasonb | This SSL/X.509 stuff gets deep fast. |
| 21:18.12 | lmazzella | yes, im not a developer :) |
| 21:19.12 | lmazzella | Im mainly trying to avoid upgrading this current JDK; I would rather build a new server from scratch |
| 21:19.15 | randrew | jasonb: the shibboleth project includes a tool to do that |
| 21:20.06 | randrew | it's called extkeytool |
| 21:22.30 | randrew | There it is: http://anoncvs.internet2.edu/cgi-bin/viewcvs.cgi/shibboleth/java/src/edu/internet2/middleware/shibboleth/utils/ExtKeyTool.java |
| 21:25.05 | *** join/#tomcat simplebird (~lind@user-12ldaq6.cable.mindspring.com) |
| 21:28.10 | jasonb | randrew: Neat! Interesting project name. |
| 21:28.24 | jasonb | randrew: Did you find that on google? |
| 21:28.52 | randrew | jasonb: nah, an ex-coworker of mine wrote the code |
| 21:29.42 | randrew | jasonb: I've never used it, but it's easy to build, just that one src file and log4j.jar |
| 21:30.26 | jasonb | randrew: Yup, I noticed that. Quite nicely self-contained. |
| 21:30.33 | jasonb | randrew: Thanks for that. |
| 21:31.47 | *** part/#tomcat nichoj (~nichoj@cpe-24-194-46-95.nycap.res.rr.com) |
| 21:32.04 | randrew | jasonb: It's weird how random details can be useful. I remember him complaining that keytool was lame. |
| 21:32.17 | randrew | jasonb: later. |
| 21:32.39 | *** part/#tomcat randrew (~raj@dolmen.cc.columbia.edu) |
| 21:50.14 | loquace | ++ |
| 21:51.56 | lmazzella | guys, thanx a lot...I will update you with the results. Thanks for all the help |
| 21:53.06 | jasonb | You're welcome. |
| 21:53.11 | jasonb | Good luck. :) |
| 21:58.49 | lmazzella | thanx :) |
| 22:11.11 | *** join/#tomcat alx_ (~alx@213-140-17-111.fastres.net) |
| 22:32.28 | *** join/#tomcat Alexys (~Alexys@201.245.8.206) |
| 23:21.03 | *** join/#tomcat SexyKen (~sexyken@c-67-161-5-149.hsd1.ca.comcast.net) |
| 23:21.08 | SexyKen | Anyone know what this means: org.apache.jasper.JasperException: access denied (java.io.FilePermission /usr/bin/env execute) |
| 23:25.06 | Big_Bozz | SexyKen: Seems that the Tomcat user doesn't have access to the env |
| 23:25.11 | Big_Bozz | damn - too late |