Certificates in JRun 4.0...i'm getting nuts!
Hello there!
This situation it's getting me nuts!
We have JRun 4.0 and we got the Verisign (VS) certificate.
* We created the keystore file:
keytool -genkey -keyalg RSA -alias jrun -keystore mykeystore
* Now, we created the request for VS:
keytool -certreq -keystore mykeystore -alias jrun -file myreq.csr
* We received the certificate from VS and we pasted it in mycert.cer
* Now we import the certificate in the keystore and in the trustStore files (we have located both in c:\jrun4\lib):
keytool -import -trustcacerts -keystore mykeystore -file mycert.cer
-alias jrun
keytool -import -trustcacerts -keystore trustStore -file mycert.cer
-alias jrun
* Then we set the SSL and Proxy service in the JMC pointing to these files (keystore and trustStore).
We connect to the site: https://localhost:9100 (This is the SSL port)
An we receive the message that this certificate is not valid!!!
WHAT ARE WE DOING WRONG???
Please, help us we need your help it very much!
Regards.
Hi!
Thank you for your response!
This is the message in the log:
error peer not authenticated
javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
at com.sun.net.ssl.internal.ssl.SSLSessionImpl.getPeerCertificateChain(DashoA6275)
at jrun.servlet.http.SSLEndpoint.verify(SSLEndpoint.java:82)
at jrun.servlet.http.SSLEndpoint.<init>(SSLEndpoint.java:35)
at jrun.servlet.http.SSLService.createRunnable(SSLService.java:123)
at jrunx.scheduler.ThreadPool$ThreadThrottle.createRunnable(ThreadPool.java:377)
at jrunx.scheduler.WorkerThread.run(WorkerThread.java:62)
I made the certificate using the name/lastname as "localhost" (i'm in test mode). As I was describing, I'm using the certificate Verisign sent me. My concern is if I'm using the right commands to create the keystore and trustStore files. I'll appreciate if you take a deep look to the process, because I think I'm doing something wrong with:
- The alias.
- Genkey-request-import process.
I installed the other certificate in the browser as Verisign asked for (you know, the extra certificate the send you in test mode). But I still have the error and the unknow certificate window.
Thanks in advance.
Carl.
Similar Messages
-
I am on a website that requires a client certificate to validate identity. When I select a certificate to use, it goes back to the list of certificates. I can't seem to get anywhere. Help!
You should be given the certificate, or cookie, by the website. See if in Preferences (under Safari on the menu bar), Privacy, do you have certificates blocked Always?
-
Getting nuts wit Internet&capZuule
Hi @All
i bought a 1TB TimeCapsule and i´m getting nuts after two nights of "playing" with Networksettings
My DSL-Modem (kabel Deutschland) located in my Garage connected via Devolo (DLan-Kit)wired to WIFI Router in Livingroom.
Ethernet from Devolo in WAN-Port of the Router...works fine.No matter witch connection i choose. wired or wireless. everything works.
I thought i could just replace my Ruter with TimeCapsule but there´s the Problem.
wired Devolo to WAN-Port of Capsule; Lan-Port connected to my MacBook and nothing happens. Simply no IP/DNS..
config as new WIFI didnt work at all. Wifi works biut no internet...
Any Ideas??
Thank you very much!!
MichaelSounds like a DNS server issue.
Try using the OpenDNS.org DNS servers
208.67.222.222
208.67.220.220
System Preferences -> Network -> Advanced -> DNS -> [+]
Oops! I just noticed you are running Tiger (Mac OS X 10.4), so while you add the DNS server addresses to System Preferences -> Network, the exact steps after you get there are slightly different from Leopard.
Message was edited by: BobHarris -
Getting nuts! simple onSubmit process but does not work...
hello.
once again my little problem:
on page 1 i have a report. every row has a link:
http://192.168.255.20:7777/pls/htmldb/f?p=116:21:3135390112602440240:END_TASK:::END_ID:22
where END_ID:22 gives the id of the row to a textfield on page 21 which is launched.
on page 21 there is a small "report" of only the chosen row to give us again the details of the chosen row.
there are additionally 2 buttons, button END_ID which stores the id that we've got through the link's URL, and another textfield P21_AUFTRAGSDAUER i can enter some stuff into.
and there's a submit button that submits the page (NO redirection or something like that).
now on the same page 21 i created an onSubmit process which should update the chosen row. it's launched after all verifications and stuff, and its source is
update wartungs_auftraege
set status=2,
time_spent = :P21_AUFTRAGSDAUER
where auftrags_id = :END_ID
and now there's the strange thing: while in
time_spent = :P21_AUFTRAGSDAUER
the placeholer :P21_AUFTRAGSDAUER is replaced correctly with the entered value, :END_ID in
where auftrags_id = :END_ID
is ALWAYS replaced with 1, although it shows the correct value that was passed through the link's URL! i just don't get it anymore! i've taken a look at the source code, and both inputs look the same:
<INPUT TYPE="text" NAME="p_t01" SIZE="30" MAXLENGTH="2000" VALUE="22" id="END_ID" >
<INPUT TYPE="text" NAME="p_t02" SIZE="30" MAXLENGTH="2000" VALUE="21" id="P21_WARTUNGSDAUER" >
i'm getting nuts with that, i'm trying since 2 hours to solve this problem... :(((
please help me, anyone! thanks...the END_ID item was created by using the create-element-wizard. its source type is set to (i try to translate it from german)
used alternative source: only if current value of session is NULL
source type: ITEM (application or site element name)
source value:
END_ID
standard value:
&END_ID. -
How to get SSL certificates in JRun
I have some problems in using JRun 3.1 with apache 2.0 in
microsoft Windows XP professional.
I want to get SSL peer certificates in a jsp file. But it was
always failed.
Could you tell me how to get the remote user's certificate.
content of JSP file:
boolean isSecure = request.isSecure();
if(isSecure)
X509Certificate[] certChain =
(X509Certificate[])request.getAttribute("javax.servlet.request.X509Certificate");
if(certChain!=null)
else
out.println("<br>User certificate is
null.<br>");
...Configuring Commercial certificates on weblogic server
http://weblogictips.wordpress.com/2008/07/27/configuring-commercial-certificates-on-weblogic-server/
How to debug SSL issues with weblogic server
http://weblogictips.wordpress.com/2010/05/11/how-to-debug-ssl-issues-with-weblogic-server/
Steps to create self sign certificates for weblogic server
http://weblogictips.wordpress.com/2008/07/27/steps-to-create-self-sign-certificates-for-weblogic-server/
thanks,
sandeep -
Getting nuts with null atributes problem
Hello everybody,
I have this problem:
My project is working fine except one JSP-Backing bean pair that is driving me crazy, When I load the JSP through a tree2 menu, the page loads ok, I have some selectOneMenu components, that are loaded in the constructor of my backing bean using some Business Delegate Methods, in the JSP I also have some InputText components, when I click the button that takes all values to build a BO object that I have to pass to ht Business Delegate, everything into the bean is null.
I have tried to read the value of the components using the two normal ways:
1. Calling the name of the variable directly: for example:
String nameValue = strNameSelected();2. Calling its get method:
String nameValue = getStrNameSelected();None of the work, when I print them in console all values are null.
All calls are into the same bean, nonetheless, everything gets returned as null, so I tried first to acquire the bean from the session, to read its values, like this:
MyBackingBean myBean =
(MyBackingBean ) sesion.getAttribute("MyBackingBean ");
bearing in mind that MyBackingBean is the name in the faces-config.xml.
However, this brings the same results. Null elements into the bean.
The declaration of the bean in the faces-config.xml is this:
<managed-bean>
<managed-bean-name>MyBackingBean </managed-bean-name>
<managed-bean-class>com.mycompany.bean.MyBackingBean </managed-bean-class>
<managed-bean-scope>session</managed-bean-scope>
</managed-bean>What I cannot understand is Why the selectOneMenus are getting loaded with the right values in the constructor, but at the time I call the value of the elements they are null :-(
Have anyone faced a problem like this?? I'm in a very big hurry, hope someone can help me :-)
Thanks a lotHello Pringi,
I have found the source of the problem, I had a immediate="true" attribute in the button, so this was generating the problem.
Thanks a lot for your interest. -
It looks like my firefox browser is using an old facebook security certificate dated 2-28-14. How do I get to my certificate manager in my firefox browser so I can see if there's an updated security certificate (4-18-14 or after) and get that in place? Be specific with steps for me to follow please.
I think what you are looking for is<BR><BR>
'''Firefox Options > Advanced > Certificates.''' -
I am trying to open up the web page where we log into our employee email. Evidently the security certificate has been changed. I am getting a certificate error message, but I am not seeing a link provided where I can click to add this web site as an exception.
This is a user to user forum. You are defintely in wrong place.
-
How to get the Server Certificate Chain File?
Hi all,
I config the SSL for weblogic 6.0 on a Win2k Machine .I followed WebLogic
documentation:
Generate a private key file, then submit to Verisign, get the certificate
file.
Because I have only one WebLogic server. I clear the "Server Certificate
Chain File" field.
But I get error message after reboot WebLogic. Following is the error
message:
<2001-1-21 04:57:56 pm> <Alert> <WebLogicServer> <Inconsistent security con
figuration, java.lang.Exception: Required file server-certchain.pem which is
spe
cified by ServerCertificateChainFileName, was not found>
java.lang.Exception: Required file server-certchain.pem which is specified
by Se
rverCertificateChainFileName, was not found
at
weblogic.t3.srvr.SSLListenThread.resolvePropertyFromLocalFile(SSLList
enThread.java:152)
at
weblogic.t3.srvr.SSLListenThread.resolvePropertyFromAdminServer(SSLLi
stenThread.java:180)
at weblogic.t3.srvr.SSLListenThread.<init>(SSLListenThread.java:425)
at weblogic.t3.srvr.SSLListenThread.<init>(SSLListenThread.java:297)
at weblogic.t3.srvr.T3Srvr.initializeListenThreads(T3Srvr.java:939)
at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:403)
at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:169)
at weblogic.Server.main(Server.java:35)
My question is: Should I input the rootCA certificate into the Server
Certificate Chain File field? If yes, where can I get the rootCA certificate
file?
Thanks[sorry, deleted irrelevant wrong answer]
-
Getting self-signed certificates working with mail
Hi all,
I am having trouble getting email certificates created with keychain access to work in mail.
According to the Leopard help file, you simply have to go to Keychain access and create the certificate, which I did. After that if you create a message in mail with that account, there should be an icon showing that the message will be signed or encrypted if you have the recipients certificate installed. I cannot seem to get this to work. I have created the certificates specifically for email, the certificate shows in Keychain as well as a public and private key entry, but mail refuses to see it.
Has anyone gotten this to work with Mail and self-signed certificates?
Any help would be most appreciated.
Thanks,
RacerXHave you tried setting the "Always trust" property? Double click the certificate in Keychain Access and allow it to have always trust for email.
Also, make sure that bundles are enabled for mail.
(Forget the command, google for "defaults write com.apple.mail enableBundles")
That did it for me.
Br,
T -
Airport unable to connect - keeps getting unnecessary certificate
Wanted to bring my new Mac to school - and connect it to the wireless network. I can't get access because my mac keeps downloading a certificate which somehow prevents my computer from getting access to the wireless network.
I've asked both the guys who works with the wireless internet (and setting it up on regular PC's) and the guys working with mac's.. Nobody seems to know why my mac keeps downloading this certificate - but all agree on the fact that it's the reason why I can't connect - so how do I force my mac not to download this certificate - since it is not necessary for connecting to the network at all..
The man who knew most about mac suggested a re-install of Mac OS X - but this seems a quite drastic?
Hope somebody knows what kind of magic to use..
I'll of course try to get the most information possible if something is needed to solve the problem..Strange. My school has something similar, but I can get through just fine.
When you get notified of the certificate, click on Show Certificate, then check the box to explicitly trust your school's certificate. Enter your password to confirm.
See if that helps. -
Could not establish TLS connection on port 7001 - "unable to get local issuer certificate"
tvcs: Event="Outbound TLS Negotiation Error" Service="SIP" Src-ip="10.0.7.168" Src-port="29127" Dst-ip="<Public IP>" Dst-port="7001" Detail="unable to get local issuer certificate" Protocol="TLS" Common-name="ewe.<domainname>.com" Level="1" UTCTime="2014-11-12 12:48:20,071" 2014-11-12T15:48:05+03:00
Getting above error on Expressway-C server while establishing TLS connection with Expressway-E in DMZ. I have enabled static NAT on Expressway-E and give the Public IP on peer address of Expressway-C. At that time, i was getting DNS resolution error on Expressway-C so we added a host record on local DNS for Public IP. Later, I created CSR from both Expressway C & E server and ask local microsoft team to issue Local CA certificates. After uploading, i was getting above error (Failed to establish TLS). Also i have uploaded company (wilcard) Public certificates (issued from Geotrust) and we are getting the samer error and Expressway server could not establish TLS connection on port 7001. Firewall connections are done and i double checked it.
Expressway ver 8.2Yes, Exp-C > Peer Address (FQDN of Exp-E)
Certificate of Exp-E -> When generating CSR from Exp-E, automatically FQDN (Exp-E(hostname).domainname.com) will be shown. Then this CSR will be send to local CA or Public CA to generate a certificate. OR you meant to say in Exp-E CSR we need to add FQDN of Exp-C server also in alternative name and vice versa too.
Yes, root certificates & intermediate certificates are uploaded to trusted CA. -
Cannot get a working certificate on the iPhone to get the iPhone working
Hi, We've tried just about everything to get the iPhone working with our Exchange server to push email via active sync. We are using our own self signed certificates, not ones from Verisign for example, and we are using the IP Config Utility 2.0 on Windows XP PC to import the certificates. We have EAS setup on Exchange 2007. We generated the config for the user and emailed the config to a personal user account which we are able to access via the iPhone. We opened the email and double clicked the config file which then installs the profile to the iPhone but we get error 403 when we try and sync email. The iPhone doesn't appear to be presenting the personal certificate to the excchange server correctly which is causing the 403 error.
Has anyone else experienced this and if so do you have a workaround or public fix for it. We are trying to avoid having to go to a certificate authority.
Appreciate any feedback.Objective: Get a **** personal certificate working on the stupid iPhone
Update: Settings
1). Exchange Management Console - Under client access role - Exchange Active Sync - Authentication - basic authentication is checked, ignore client certificates is checked
2). Under IIS Manager - Default Web Site - Microsoft Server Active Sync - Directory Security - Secure Comms - Require Secure cannel is checked, ignore client certificates is checked
3. Server certificate is installed onto the exchange server - issued by our own certificate authority/server
4). iPhone installed with root certifcate from the certificate server and the exchange certificate which was issued by the certificate server.
Under the above configuration we can get email working fine on the iPhone. Its synced correctly with exchange and able to receive and send email. Both the root and server certificates were installed to the iPhone using the iPCU.
Ok then, second test
Settings:
2 setting changes only applied:
1). Under IIS Manager - set it to require client certificates
2). On the iPhone removed the old profile - updated the profile to include a client certificate issued from the same certificate server that the exhcnage server certificate was issued from. So now there are 3 certificates on the iPhone (the root cert, the exchange server cert and the client cert). NOTE: When viewing the profile certificates on the iPhone the issued by field on the personal certificate is blank, opening it up shows no details. The certificate is a .pfx certificate so this explains why the details cant be viewed.
On re-attempting to sync email we get the 403.7.5 error (client requires a certificate) even though we put one on the phone. It looks like the client certificate either is not being passed through. I've read many forums indicating this issue in that Safari on the iPhone doesn't support client certificates. I've also read that a reverse proxy might be a work around - has anyone tried this?
It doesn't matter whether we use our own client certificate or a client certificate signed by Verisign, both end up with the same result.
Does anyone have an answer yet - has Apple got their act together yet and provided a resolution to this problem?
Can anyone explain to me exactly how the certificate authentication process works. For example we couldn't get it working with "ignore Client Certificates" at first when we just put the exchange server certificate on the iPhone. We had to put the Root CA certificate on the iPhone also???
If anyone can help that'd be great, any help at all at this stage would be good.
Cheers. -
Safari won't open page due to certificate error
I incorrectly clicked on something when opening a new page and now the page won't open anymore. The error I get is "the server "shop.rcbs.com" did not accept the certificate". How do I fix this?
JTThe site requires you to have a certificate issued by the site operator for access. You don't have that certificate. Contact the site operator about getting one.
-
SSL Offloading and Certificate Errors
I am attempting to offload SSL on an F5 load balancer. I made the certificate request from the load balancer, procured the certificate from Entrust, and installed on the load balancer. I then followed SSL Offloading TechNet instructions here:
http://technet.microsoft.com/en-us/library/dn635115(v=exchg.150).aspx. My two CAS servers still have the self-signed certificates bound in IIS. I am getting certificate
errors when making RPC over HTTPs connections in Outlook and the self-signed certificate is popping up.
My question is what do I do with the certificates on my 2 CAS servers? Do I leave the self-signed certificates on there and export the Entrust certificate from my F5 and then import it to my CAS servers and change the bindings in IIS?
Or do I have to make the CSR from a CAS server, issue a new Entrust certificate from that, import to both CAS servers, then import to the F5 and make sure all bindings are correct in IIS?
Or am I completely misunderstanding how this works and need to do something different entirely?
Thanks in advance for any guidance.As I previously mentioned, I have already followed the SSL Offloading guide from technet, which included unticking Require SSL for all the various objects in IIS (OWA, ECP, EWS, RPC etc.)
Additionally I made sure SSL Offloading was enabled for Outlook Anywhere in Powershell. See for example output of Get-OutlookAnywhere:
RunspaceId : 1bdf6a03-d43d-4478-84cc-95e18806b11b
ServerName : TSTEXCG2013
SSLOffloading : True
ExternalHostname : tstowa.XXXX.com
InternalHostname : tstowa.XXXX.com
ExternalClientAuthenticationMethod : Ntlm
InternalClientAuthenticationMethod : Ntlm
IISAuthenticationMethods : {Basic, Ntlm, Negotiate}
XropUrl :
ExternalClientsRequireSsl : True
InternalClientsRequireSsl : True
MetabasePath : IIS://TSTEXCG2013.tstXXX.tstXXXX.tst/W3SVC/1/ROOT/Rpc
Path : D:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\rpc
ExtendedProtectionTokenChecking : None
ExtendedProtectionFlags : {}
ExtendedProtectionSPNList : {}
AdminDisplayVersion : Version 15.0 (Build 847.32)
Server : TSTEXCG2013
AdminDisplayName :
ExchangeVersion : 0.20 (15.0.0.0)
Name : Rpc (Default Web Site)
DistinguishedName : CN=Rpc (Default Web
Site),CN=HTTP,CN=Protocols,CN=TSTEXCG2013,CN=Servers,CN=Exchange
Administrative
Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=XXX XXXX,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=tstXXXX,DC=tst
Identity : TSTEXCG2013\Rpc (Default Web Site)
Guid : 9b2bc5e2-41c1-4219-9186-8e6b8cb63dc0
ObjectCategory : tstXXXX.tst/Configuration/Schema/ms-Exch-Rpc-Http-Virtual-Directory
ObjectClass : {top, msExchVirtualDirectory, msExchRpcHttpVirtualDirectory}
WhenChanged : 7/10/2014 7:38:58 PM
WhenCreated : 6/23/2014 2:54:36 PM
WhenChangedUTC : 7/11/2014 12:38:58 AM
WhenCreatedUTC : 6/23/2014 7:54:36 PM
OrganizationId :
OriginatingServer : TSTXXXXDC02.tstXXXX.tst
IsValid : True
ObjectState : Changed
Maybe you are looking for
-
I used to to save all my emails or anything else to a "save as PDF" or "export to PDF" and now its not working it tells me the the file name is too long, over 31 characters not supported (all my other files are longer before) then I make it shorter,
-
Possible to change black background in Slideshow?
Any way to change the black background to another color when exporting a Slideshow? G5 Dual 2, G4 1.33 & 450, 2 iMacs, G3 Biege Mac OS X (10.4.3)
-
Job cancelled after system exception ERROR_MESSAGE - Why ?
Hi to all, Anyone knows why, when I execute a program in foreground, everything is ok . When I try to execute it in background (schedulated in a job ) I obtain "Job cancelled after system exception ERROR_MESSAGE Message no. 00564" I have a check in
-
Firefox worked merely hours ago on my computer, had to delete as I explained above because of a dodgy toolbar from some website, deleted firefox, tried re-installing and won't work. Tried links on other help pages to download older firefox version an
-
Single SSL Web Listener for hosting multiple web sites
Hi All, We are currently hosting multiple websites with Single HTTP Web Listener .. As of now it's everything is working fine.. Now we have planned to have SSL for the hosted sites Each hosting site will have different SSL Certificates and i am lit