2 way SSL: How does Sun implement handling malformed certificate requests?
Hi
I'd like to know how sun implements the following 2 way ssl-scenario:
When an SSL server requests client authentication, it sends a message
to the client that says "here is a list of the names of CAs that I trust
to issue client certs. If you have a client cert from one of these
CAs, then send it to me". That list is NEVER supposed to be empty.
But the hint above suggests that it is. If your server has not been
configured with the names of CAs that it trusts to issue client certs,
it's sending an empty list.
When an SSL client receives such a malformed request, with an empty
list of trusted client CA names, it may either (a) choose to send
back a response that means "I have no cert issued by any of the
issuers you have named", ***or (b) send back any certificate you have***
***and hope the misconfigured server will accept it.***
Please advice? What is the switch to tell the client to send any certificate?
Thanks a lot
Christian
That list is NEVER supposed to be empty.It doesn't actually say that anywhere in the RFC.
When an SSL client receives such a malformed request, with an empty
list of trusted client CA names, it may either (a) choose to send
back a response that means "I have no cert issued by any of the
issuers you have named", ***or (b) send back any certificate you have***
***and hope the misconfigured server will accept it.***That's not how I read the RFC. I would say the client should decide there is no suitable certificate available, and send back an empty ClientCertificate message. That in turn may provoke the server into sending a fatal handshake failure alert.
What is the switch to tell the client to send any certificate?There is no such switch.
More to the point, why is the server's CA list empty? That must mean that it has an empty truststore. That's the problem you should fix.
Similar Messages
-
How does GRC CUP handle scheduled termination set up in SAP HR ?
Dear Experts,
We are planning to use "HR Tiggers" for Hire, Terminate and transfer events in GRC CUP ? Can some body help me understand how does GRC CUP handle the termination requests that are scheduled in future ?
Thanks
KumarI configured HR trigger rule for infotype 0000 & subtype Z1,field MASSN with value equal to 01 to trigger new hire...i don't see any data being populated into table /VIRSA/INT_TRIG & ?VIRSA/DATA.
I could see the rule in table /VIRSA/RULEATTR.
Any help would be appreciated.
Thanks,
Srinu -
How does iTunes Genius handle two libraries for the same user?
I've been reading lately about how iTunes Genius should work. To my understanding, one of its basic principles, is absorbing usage data from users in order to create a database consisting of as much information possible. I don't expect a detailed explanation about the algorithms here. I know Apple doesn't share that kind of information (for obvious reasons) and I doubt I'd be able to understand much of it anyway. What I would like to know, though, in general terms, is how does this mechanism handle an instance like mine, where I use my Apple ID on two computers - one at home, another at work. That way, I have all my songs on both computers, so I can listen to them in either location. Obviously, each such library produces different usage data.
Thanks in advance for any information, as I'm quite curious about it.Dear Fateh,
Thanks for the reply.
The features of this plugin are:
Configurable timeout actions including alert, redirect, and logout
Optional and configurable warning message
Option to keep session alive if user isn’t truly idle. Special thanks to Martin D’Souza for a great idea on how to implement this feature.
But it cannot stop a new session for a user, if there is an active (in my definition apex_workspace_activity_log.seconds_ago<240) session already running for that user.
Regards,
Deepika. -
How does Sun make money from Java? Silly question.
Hi,
From what I have read about the J2SE licensing, we are able to download the SDK and develope commercial applications with it for free.
Have I made a big mistake in my reading? How does Sun make any money from Java?
Thanks very much.
Prem.related topic
a lot of companies package a free or trial version of software like
Rational Rose
TextPad
VisualAgeForJava
DreamWeaver
etc.....
the versions may be limited in many ways
they want public and students to use it to become popular
students get jobs and convince boss to buy enterprise edition
they make money
I didn't mention sun in the above list cause they are special!!!!!
some other interesting topics include GNU liscence and
COPYLEFT
check it out -
How does java implements runtime polymorphism.?
Hi all.
we know how does runtime polymorphism take place in java.
But my quesions is , how does java implement it internally.
in C++, with the use of keyword virtual , complier decides to make a call at runtime using virtual table and Vptr.
like in c++,
class base {
public:
virtual void show(){
cout<<"I am in base class"<<endl;
class child : public base {
public:
void show(){
cout<<" I am in child class"<<endl;
int main(){
base*p = new child();
p->show();
return 0;
out put - I am in child class.
but if we remove the virtual keyword then output
I am in base class..
We know how it happens
but in java
class base {
void show(){
System.out.println("I am in base class");
class child extends base {
void show(){
System.out.println(" I am in child class");
class demo {
public static void main(string args[ ]){
base b;
child c = new child();
b = c;
b.show();
output is - I am in child class
but how can i bring the output as
I am in base class ---
complier knows that b is base reference so y doesnt it just use base version.if all methods are virtual..then we should always have runtime binding but we do have early biding too.
shouldnt we able to call base verison using a base reference variable like in c++.
May be I m mixing big times java n c++. But it seems to me as core java is much like c++ . The things u can do in c++ , u can do same in java in different ways. -
How does Media Manager handle Motion Projects within the Sequence being cop
How does Media Manager handle Motion Projects within the Sequence being copied?
I've highlighted my sequence, opened Media Manager, and copied it to another drive. When I open up the sequence in it's new project, the rendered Motion Project plays within my sequence but it won't let me go back into this Motion Project to make changes. I tried starting over. This time I highlighted the actual motion sequence and clip that is created within FCP after sending something to Motion and copied those to the new drive. When I went into the newly created 'media' folder and double clicked on the motion project it launched. It looked liked it was going to play but while my crops moves and borders were there, the filmed material is shown as a freeze frame for the duration of the motion project.
I did this with and without 'including master clips within selection'. Any advice would be appreciated. Thanks.Is there anyone who knows the answer to this? Thanks.
-
How does the iMac handle HD video editing?
Tired of Window PCs, looking to buy an Apple System. I would like to do some video editing but want to make sure I get a powerful enough system from the start. How does the iMac handle HD video editing or should I look a better, faster computer?
I have a mid 2011 iMac, 21 inch 4 GB RAM (the next to bottom iMac), Lion. I run Final Cut Express 4 with no difficulty (at least so far). It is certainly fast enough. My old G5, 7 years old, was also, and the iMac is faster.
As I remember, I heard from someone on the Final Cut Express Discussions that some people might be having difficulty with FCE 4 on Lion, but I am a bit hazy. Its bigger brother, Final Cut Pro, is also available. I suggest that you post on the Final Cut Express or Final Cut Pro Discussion sites. They have many reliable users. -
How does iTunes match handle music that isn't available in iTunes?
How does iTunes match handle music that isn't available in iTunes?
Apple - iTunes - Match
iTunes Store: Subscribing to iTunes Match
iTunes Match on iPhone, iPad, or iPod touch -
HT204074 How does iTunes match handle music that isn't available in iTunes?
How does iTunes match handle music that isn't available in iTunes?
Music in your iTunes library that isn't available at the iTunes Store is uploaded to your iCloud account.
-
Im getting my first and brand new Macbook Pro this week and have to admit although i researched a lot i still dont know how it will handle my data which i currently have stored on my dvds (because i have to format my external hdd). will for example iTunes handle the data in the same way as it does on a PC? i mean by this that the PC version of iTunes only makes a copy of the files where as the files can be stored somewhere else. i dont wanna have the same thing on my mac. for example what happens if i change the name of a file (again in iTunes or iPhoto). will it change the name of the original file as well or IS it already the original file which is seen in such programs on the OS X? its a kinda confusing question i know but i am uncertain of what to do with the data once i put in a DVD into my new mac. please help....
hope this is the right forum for the question. thank you anyways.Tharanon,
From your latest post, it sounds to me like your main concern is, in fact, file organization. If that's correct, you'll have no worries!
There's not terribly much different between the file systems (even though they are two different formats). At least, not so in the way you will interact with them. You will have one "volume," named "Macintosh HD" by default. You can choose to have this volume appear at all times on your Desktop, with an appropriate "hard drive" icon, or not- according to your taste. It will always show up in the "Sidebar" of any open Finder window as a shortcut. This volume, when opened in the Finder, will show several folders; "Applications," "Library," "System," and "Users" (at the very least). Obviously, the "Applications" folder is where your applications will be stored. Your own HOME folder, and those of any additional users you create, will reside in the "Users" folder. All very simple, all very organized.
Any additional "volumes" can/will also show up on your Desktop, provided you set that as a preference in the proper location. This includes any attached device that can potentially house files: A CD/DVD, an external hard drive, a remotely mounted network "share," a thumb drive, etc. Your access to the contents of these volumes will be as seamless and as logical (concrete) as accessing the files on your internal hard drive, through an open Finder window.
Your HOME folder stores absolutely every file you use, with the exception of those that reside solely on external/secondary volumes. Do not confuse this with the applications that allow you to access and/or view those files (as stated above, these live in the "Applications" folder). Inside your HOME folder, you will have "Music," "Movies," "Pictures," "Documents," "Downloads," and "Desktop" folders (and a couple others) by default, each intended to house the appropriate files and libraries. iPhoto, for example, will store its library within the "Pictures" folder by default. You can change this behavior as you like, of course. As you can see, however, everything is set up for you out of the box to maintain strict- and logical- organization.
I'm afraid you have been mislead a bit concerning the format of your existing external drive. You should have no trouble accessing this drive, as it is right now, from OS X. If it is formatted as FAT-32, you'll even be able to write to it. If it is NTFS, you will only be able to read.
Regardless of the format, you will have the ability to import from it, into the appropriate Apple application. And, you'll be able to import as is most convenient to you. If you find a single audio file, for example, it can simply be dragged into iTunes to effect the importation. Or, you can use the "Import..." dialogue in iTunes to scan a single folder or an entire directory structure for audio (and video, since iTunes supports video) files. iPhoto operates in the same way, of course, and it won't matter to any of the iApps where the source files you want to import reside, provided the volume can be read by OS X.
Perhaps your only hurdle will be the fact that some "generically" named files will be imported as such, and it will be up to you give them meaningful names. What I mean by this is that you may end up with a bunch of tracks in iTunes named simply "track 1," track 2," etc. This is a problem regardless of how one imports, and it is up to the user to grant meaningful names at the time the files are imported, or to slog through tracks at some later time to determine what's on them (and to name them according at that time).
Getting back to the issue of your external drive's format.... Unless you intend to continue using this drive with PCs, you will at some point want to reformat it as HFS+ (Mac OS Extended), if only to use it as a Time Machine backup drive (and BTW, begin using Time Machine to make regular backups as close to immediately as you can manage). I wouldn't recommend that you erase this drive right off the bat, since you may have some files on it that are important to you. If you know this is not the case, and that everything you want to keep is stored on your DVDs, go right ahead. Just be sure, and keep in mind that OS X will undoubtedly read it just fine (even if it cannot write to it).
If you have further questions, ask away.
Scott -
How does Time Machine handle large files?
I'm relatively new at the whole Time Capsule / Time Machine process and have learned that large files (eg aperture library) are backed up each time there is a change and this can lead to the TC filling up quicker than normal.
How does this work with daily and weekly backups?
For example, if my aperture library is, say 1Gb and I import a load of photos from my camera and this goes up to 2Gb. I've learned that I should disable time machine while I'm in Aperture (or at least before 10.6...not sure now). So given I've done that, imported the files to Aperture but want to edit them later and ultimately move them into iPhoto to keep the Aperture album small.
When I turn back on Time Machine, the next hourly backup will know the library has changed and will back it up, this will go on until a day backup has been taken - this deletes the 24 hourly backups? or does it merge them?
If I then do the editing the following week, then export the photos and the library is now back to 1Gb again....backed up hourly/daily/weekly etc what am I left with??
Do I have an original, the 2GB version and the new 1Gb version...ie 4Gb......is there a cunning way I can work to change the files within a week so only one of the changes is in the backup?Orpheus999 wrote:
When I turn back on Time Machine, the next hourly backup will know the library has changed and will back it up, this will go on until a day backup has been taken - this deletes the 24 hourly backups? or does it merge them?
The Time Machine panel of System Preferences says this:
Time Machine keeps
- Hourly backup for the past 24 hours
- Daily backups for the past month
- Weekly backups until your backup disk is full
Each time Time Machine runs it creates what appears to be an entirely new backup set, although it does this in a way that doesn't require it to copy files that have already been copied. So merging isn't necessary. Another effect of how it operates is that each unique version of a file (as opposed to packages of files) only exists on the backup volume once.
According to the contents of my Time Machine backup file, hourly backups are literally kept for 24 hours, not until the next "daily" backup. For a "daily" backup, it seems to keep the oldest "hourly" backup for a day.
If I then do the editing the following week, then export the photos and the library is now back to 1Gb again....backed up hourly/daily/weekly etc what am I left with??
Do I have an original, the 2GB version and the new 1Gb version...ie 4Gb......is there a cunning way I can work to change the files within a week so only one of the changes is in the backup?
You might be able to exclude those files from being backed up at certain times, but I can't be sure this would result in older copied of those files being retained. -
How does Time Machine Handle separate Boot and User Volumes?
I recently installed an SSD and set it up as my boot drive, and I'm using another hard drive for my Home folder, if I ever run into a scenario that I need to restore my entire system, how will Time Machine handle it?
Will it restore my system back to the drives that they came off of?, in other words will my Boot volume be restored back to the SSD and my Home folder back to the hard drive, or will it restore everything back on the one disk it asks me to select before I click restore?Michael Hoover wrote:
Ok, so if I tried to access a backup from booting with the Snow Leopard install disk I won't be able to select which volume I need to restore?
You would restore the OSX volume via the procedure in #14 of [Time Machine - Frequently Asked Questions|http://web.me.com/pondini/Time_Machine/FAQ.html] (or use the link in *User Tips* at the top of this forum).
You would restore the data-only volume separately, via the "Star Wars" display, per #15 in the FAQ.
I guess I would be better off doing incremental backups with Carbon Copy Cloner on 2 partitions on the same volume.
That would also take two separate operations to restore. (It would be a good idea to do such backups +*in addition+* to Time Machine backups, in case there's a problem with either disk drive or backup app, or a user error like erasing the wrong disk.)
Your scenario is actually quite unlikely; you'd rarely need to restore both volumes at once. If the SSD fails, you'd only need to restore it; if the HD fails, you'd only need to restore that.
It would get a bit more complicated if you get a new Mac, especially one with a single volume. That's one of the reasons it's a good idea to keep at least a minimal Admin account on the OSX volume. -
Does anyone know how Adobe Photoshop implements
L*a*b* to calculate image data
White Point D50 or D65
What version of Lab = CIE, ICC etc..
ant CAT's Bradford of Van Kreis
View Angle 2percent, 10 percent?
Thank you.As explained in our documentation: LAB in Photoshop is D50, 2 degree standard observer, matching the ICC version 2 PCS.
-
How does Time Machine handle multiple profiles?
Hello,
I have an IMac with 3 users, does time machine handle all users?
2 users are admins, but when i change users the time machine does not handle well the external drive.
Can you give some info in this matter.
Thanks
NunoIt should work fine. All of my machines have multiple users. What problems are you having?
-
How does a pdf handle multiple SWFs at runtime?
If a pdf has multiple SWFs in it, that get turned on and off multiple times, does each one run in its own instance of the Flash Player?
If not, can they run separetely without problems?
Can one SWF run for a while and then another SWF run, followed by a return to the first SWF to resume part way through or does it start it off from frame 1 again?When a Rich Media Annotation is activated it forms a new sandboxed instance of the FP runtime, so you can have several RMAs active at the same time without too many problems (aside from things like stealing focus from one another). They cannot see each other's libraries and you cannot share data directly between them as the LSO system is disabled, but basic string-form data can be tunneled via AcroJS if you know what you're doing.
When an RMA deactivates, everything is wiped - Acrobat / Reader do not automatically store any 'resume data' but you can create a home-made resume system by coding the SWF to export/import state information to the PDF. You would have to ensure everything needed to 'resume' is packaged into the state data string, then read and parse it each time the SWF loads. Again, that data packet is not visible to other content.
Maybe you are looking for
-
Electronic Bank Statement Determining Incorrect Business Partners
Have an issue with some electronic bank statements we import into SAP. Several of the line items we get from the bank identify the incorrect business partner when creating the payment advice. We are using intepretation algorirthm 001 to interpret the
-
I am experiencing this error with one of our cluster environment. Can anyone help me in this issue. The Cluster Service function call 'ClusterResourceControl' failed with error code '1008(An attempt was made to reference a token that does not exist.)
-
When trying to find my ipod i get the message offfline. However I have it with me and it is connected to the internet and the find my iphone is on. Any suggestions?
-
Hi Team After configuring the Alert Category in "ALRTCATDEF", and then moving to Runtime Work Bench to define the Alert Rule, the Tabs"Alert Rule" and "Change Rule" are in disabled mode, only "Reset Input Fileds" is in enabled mode. i am unbale to ad
-
Hi all, I have an xml and i would like to do some query to the xml. Is there any XPath API that i can use in java ? Currently using 1.4.2 Is there any other recommendations? Thanks