ssl certificate installation problem
Locked
ssl certificate installation problem
 
|
Hello,
I have a problem on the "sslprotocol" parameter in the ofbizcontainer.xml file in ofbiz release09.04. So my catalina webserver is not starting because of this "protocol" error after installing a certificate for ssl. Can anyone check my parameters in this part of the file. <!-- SSL connector attributes --> <property name="sSLImplementation" value="org.ofbiz.catalina.container.SSLImpl"/> <property name="algorithm" value="RSA"/> <!-- the clientAuth to "want" in order to receive certs from the client; note that this isn't set this way by default because with certain browsers (like Safari) it breaks access via HTTPS, so until that problem is fixed the default will be false --> <property name="clientAuth" value="false"/> <property name="keystoreFile" value="framework/base/config/cert.txt"/> <property name="keystorePass" value="*******"/> <property name="keystoreType" value="PKCS12"/> <property name="sslProtocol" value="TLS"/> <property name="ciphers" value=""/> Thanks for helping me., Heidi -- Olagos bvba http://www.olagos.eu <http://www.olagos.eu/> http://www.olagos.com http://www.olagos.be http://www.olagos.nl Olagos team Heesterbos 5 2570 Duffel Belgium |
Re: ssl certificate installation problem
|
|
The error i get is:
java.io.IOException: toDerInputStream rejects tag type 45. regards, Heidi 2011/3/13 Info Olagos <[hidden email]> > Hello, > > I have a problem on the "sslprotocol" parameter in the ofbizcontainer.xml > file in ofbiz release09.04. > So my catalina webserver is not starting because of this "protocol" error > after installing a certificate for ssl. > > Can anyone check my parameters in this part of the file. > > > <!-- SSL connector attributes --> > > <property name="sSLImplementation" > value="org.ofbiz.catalina.container.SSLImpl"/> > > <property name="algorithm" value="RSA"/> > > <!-- the clientAuth to "want" in order to receive certs from the client; > > note that this isn't set this way by default because with certain browsers > > (like Safari) it breaks access via HTTPS, so until that problem is fixed > > the default will be false --> > > <property name="clientAuth" value="false"/> > > <property name="keystoreFile" value="framework/base/config/cert.txt"/> > > <property name="keystorePass" value="*******"/> > > <property name="keystoreType" value="PKCS12"/> > > <property name="sslProtocol" value="TLS"/> > > <property name="ciphers" value=""/> > > > Thanks for helping me., > > Heidi > > > -- > Olagos bvba > http://www.olagos.eu <http://www.olagos.eu/> > http://www.olagos.com > http://www.olagos.be > http://www.olagos.nl > Olagos team > Heesterbos 5 > 2570 Duffel > Belgium > > > > -- Olagos bvba http://www.olagos.eu <http://www.olagos.eu/> http://www.olagos.com http://www.olagos.be http://www.olagos.nl Olagos team Heesterbos 5 2570 Duffel Belgium |
Re: ssl certificate installation problem
|
|
Mari, espera un poco, para hablar con esta chica, por que seguramente vuelvo el
dia 29 como lo previsto, pues asi no me puedo operar con tanta intranquilidad y inseguridad con lo de mi padre. Prefiero ir a despedirme de el y a recoger el dinero y a arreglar lo del paro. Despues de una operacion asi yo no estare ni para viajar ni para nada en unos meses , entonces mi esposo prefiere que arregle todo lo mio y luego con tranquilidad me acomode aqui y haga todo con tranquilidad y tiempo, pues estoy en un estado de ansiedad muy fuerte. Que te parece ? Puri ________________________________ From: Info Olagos <[hidden email]> To: [hidden email] Sent: Sunday, 13 March, 2011 19:22:51 Subject: Re: ssl certificate installation problem The error i get is: java.io.IOException: toDerInputStream rejects tag type 45. regards, Heidi 2011/3/13 Info Olagos <[hidden email]> > Hello, > > I have a problem on the "sslprotocol" parameter in the ofbizcontainer.xml > file in ofbiz release09.04. > So my catalina webserver is not starting because of this "protocol" error > after installing a certificate for ssl. > > Can anyone check my parameters in this part of the file. > > > <!-- SSL connector attributes --> > > <property name="sSLImplementation" > value="org.ofbiz.catalina.container.SSLImpl"/> > > <property name="algorithm" value="RSA"/> > > <!-- the clientAuth to "want" in order to receive certs from the client; > > note that this isn't set this way by default because with certain browsers > > (like Safari) it breaks access via HTTPS, so until that problem is fixed > > the default will be false --> > > <property name="clientAuth" value="false"/> > > <property name="keystoreFile" value="framework/base/config/cert.txt"/> > > <property name="keystorePass" value="*******"/> > > <property name="keystoreType" value="PKCS12"/> > > <property name="sslProtocol" value="TLS"/> > > <property name="ciphers" value=""/> > > > Thanks for helping me., > > Heidi > > > -- > Olagos bvba > http://www.olagos.eu <http://www.olagos.eu/> > http://www.olagos.com > http://www.olagos.be > http://www.olagos.nl > Olagos team > Heesterbos 5 > 2570 Duffel > Belgium > > > > -- Olagos bvba http://www.olagos.eu <http://www.olagos.eu/> http://www.olagos.com http://www.olagos.be http://www.olagos.nl Olagos team Heesterbos 5 2570 Duffel Belgium |
Re: ssl certificate installation problem
|
|
In reply to this post by Heidi Dehaes - Olagos
Sorry for previous email.
Someone else was using my computer Mike BUtler ________________________________ From: Info Olagos <[hidden email]> To: [hidden email] Sent: Sunday, 13 March, 2011 19:22:51 Subject: Re: ssl certificate installation problem The error i get is: java.io.IOException: toDerInputStream rejects tag type 45. regards, Heidi 2011/3/13 Info Olagos <[hidden email]> > Hello, > > I have a problem on the "sslprotocol" parameter in the ofbizcontainer.xml > file in ofbiz release09.04. > So my catalina webserver is not starting because of this "protocol" error > after installing a certificate for ssl. > > Can anyone check my parameters in this part of the file. > > > <!-- SSL connector attributes --> > > <property name="sSLImplementation" > value="org.ofbiz.catalina.container.SSLImpl"/> > > <property name="algorithm" value="RSA"/> > > <!-- the clientAuth to "want" in order to receive certs from the client; > > note that this isn't set this way by default because with certain browsers > > (like Safari) it breaks access via HTTPS, so until that problem is fixed > > the default will be false --> > > <property name="clientAuth" value="false"/> > > <property name="keystoreFile" value="framework/base/config/cert.txt"/> > > <property name="keystorePass" value="*******"/> > > <property name="keystoreType" value="PKCS12"/> > > <property name="sslProtocol" value="TLS"/> > > <property name="ciphers" value=""/> > > > Thanks for helping me., > > Heidi > > > -- > Olagos bvba > http://www.olagos.eu <http://www.olagos.eu/> > http://www.olagos.com > http://www.olagos.be > http://www.olagos.nl > Olagos team > Heesterbos 5 > 2570 Duffel > Belgium > > > > -- Olagos bvba http://www.olagos.eu <http://www.olagos.eu/> http://www.olagos.com http://www.olagos.be http://www.olagos.nl Olagos team Heesterbos 5 2570 Duffel Belgium |
Re: ssl certificate installation problem
|
|
In reply to this post by Heidi Dehaes - Olagos
Hello,
If i do : keytool -list -keystore eric -storetype pkcs12 it gives me the following error: keytool error: java.io.IOException: DerInputStream.getLength(): lengthTag=109, too big. Anyone an idea? Have i to convert my pkcs12 certificate still to something else? regards, Heidi 2011/3/13 Info Olagos <[hidden email]> > The error i get is: > > java.io.IOException: toDerInputStream rejects tag type 45. > > regards, > Heidi > > 2011/3/13 Info Olagos <[hidden email]> > >> Hello, >> >> I have a problem on the "sslprotocol" parameter in the ofbizcontainer.xml >> file in ofbiz release09.04. >> So my catalina webserver is not starting because of this "protocol" error >> after installing a certificate for ssl. >> >> Can anyone check my parameters in this part of the file. >> >> >> <!-- SSL connector attributes --> >> >> <property name="sSLImplementation" >> value="org.ofbiz.catalina.container.SSLImpl"/> >> >> <property name="algorithm" value="RSA"/> >> >> <!-- the clientAuth to "want" in order to receive certs from the client; >> >> note that this isn't set this way by default because with certain browsers >> >> (like Safari) it breaks access via HTTPS, so until that problem is fixed >> >> the default will be false --> >> >> <property name="clientAuth" value="false"/> >> >> <property name="keystoreFile" value="framework/base/config/cert.txt"/> >> >> <property name="keystorePass" value="*******"/> >> >> <property name="keystoreType" value="PKCS12"/> >> >> <property name="sslProtocol" value="TLS"/> >> >> <property name="ciphers" value=""/> >> >> >> Thanks for helping me., >> >> Heidi >> >> >> -- >> Olagos bvba >> http://www.olagos.eu <http://www.olagos.eu/> >> http://www.olagos.com >> http://www.olagos.be >> http://www.olagos.nl >> Olagos team >> Heesterbos 5 >> 2570 Duffel >> Belgium >> >> >> >> > > > -- > Olagos bvba > http://www.olagos.eu <http://www.olagos.eu/> > http://www.olagos.com > http://www.olagos.be > http://www.olagos.nl > Olagos team > Heesterbos 5 > 2570 Duffel > Belgium > > > > -- Olagos bvba http://www.olagos.eu <http://www.olagos.eu/> http://www.olagos.com http://www.olagos.be http://www.olagos.nl Olagos team Heesterbos 5 2570 Duffel Belgium |
Re: ssl certificate installation problem
|
|
Seems to be an error in the certificate :
following pkcs12 standard and asn.1 standard there is an error in the length of a tag following asn.1 formats. anyone agrees? Heidi 2011/3/13 Info Olagos <[hidden email]> > Hello, > > If i do : > keytool -list -keystore eric -storetype pkcs12 > it gives me the following error: > keytool error: java.io.IOException: DerInputStream.getLength(): > lengthTag=109, too big. > > Anyone an idea? Have i to convert my pkcs12 certificate still to something > else? > > regards, > Heidi > > 2011/3/13 Info Olagos <[hidden email]> > >> The error i get is: >> >> java.io.IOException: toDerInputStream rejects tag type 45. >> >> regards, >> Heidi >> >> 2011/3/13 Info Olagos <[hidden email]> >> >>> Hello, >>> >>> I have a problem on the "sslprotocol" parameter in the ofbizcontainer.xml >>> file in ofbiz release09.04. >>> So my catalina webserver is not starting because of this "protocol" error >>> after installing a certificate for ssl. >>> >>> Can anyone check my parameters in this part of the file. >>> >>> >>> <!-- SSL connector attributes --> >>> >>> <property name="sSLImplementation" >>> value="org.ofbiz.catalina.container.SSLImpl"/> >>> >>> <property name="algorithm" value="RSA"/> >>> >>> <!-- the clientAuth to "want" in order to receive certs from the client; >>> >>> note that this isn't set this way by default because with certain >>> browsers >>> >>> (like Safari) it breaks access via HTTPS, so until that problem is fixed >>> >>> the default will be false --> >>> >>> <property name="clientAuth" value="false"/> >>> >>> <property name="keystoreFile" value="framework/base/config/cert.txt"/> >>> >>> <property name="keystorePass" value="*******"/> >>> >>> <property name="keystoreType" value="PKCS12"/> >>> >>> <property name="sslProtocol" value="TLS"/> >>> >>> <property name="ciphers" value=""/> >>> >>> >>> Thanks for helping me., >>> >>> Heidi >>> >>> >>> -- >>> Olagos bvba >>> http://www.olagos.eu <http://www.olagos.eu/> >>> http://www.olagos.com >>> http://www.olagos.be >>> http://www.olagos.nl >>> Olagos team >>> Heesterbos 5 >>> 2570 Duffel >>> Belgium >>> >>> >>> >>> >> >> >> -- >> Olagos bvba >> http://www.olagos.eu <http://www.olagos.eu/> >> http://www.olagos.com >> http://www.olagos.be >> http://www.olagos.nl >> Olagos team >> Heesterbos 5 >> 2570 Duffel >> Belgium >> >> >> >> > > > -- > Olagos bvba > http://www.olagos.eu <http://www.olagos.eu/> > http://www.olagos.com > http://www.olagos.be > http://www.olagos.nl > Olagos team > Heesterbos 5 > 2570 Duffel > Belgium > > > > -- Olagos bvba http://www.olagos.eu <http://www.olagos.eu/> http://www.olagos.com http://www.olagos.be http://www.olagos.nl Olagos team Heesterbos 5 2570 Duffel Belgium |
«
Return to OFBiz - User
|
1 view|%1 views
| Free forum by Nabble | Edit this page |